Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2024:3507-1 critical: MozillaThunderbird memory safety enhancements

suse
Calendar Grey October 1, 2024
Dist Suse Esm H88
SUSE enhances Mozilla Thunderbird, resolving 34 vulnerabilities, boosting stability for Linux patrons. Keep your system safe!
* bsc#1184272 * bsc#1226316 * bsc#1228648 * bsc#1229821

Summary

## This update for MozillaThunderbird fixes the following issues: * Mozilla Thunderbird 128.2.3 MFSA 2024-43 (bsc#1229821) * CVE-2024-8394: Crash when aborting verification of OTR chat. * CVE-2024-8385: WASM type confusion involving ArrayTypes. * CVE-2024-8381: Type confusion when looking up a property name in a "with" block. * CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran. * CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions. * CVE-2024-8386: SelectElements could be shown over another site if popups are allowed. * CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. MFSA 2024-37 (bsc#1228648)

References

* bsc#1184272

* bsc#1226316

* bsc#1228648

* bsc#1229821

Cross-

* CVE-2024-6600

* CVE-2024-6601

* CVE-2024-6602

* CVE-2024-6603

* CVE-2024-6604

* CVE-2024-6606

* CVE-2024-6607

* CVE-2024-6608

* CVE-2024-6609

* CVE-2024-6610

* CVE-2024-6611

* CVE-2024-6612

* CVE-2024-6613

* CVE-2024-6614

* CVE-2024-6615

* CVE-2024-7518

* CVE-2024-7519

* CVE-2024-7520

* CVE-2024-7521

* CVE-2024-7522

* CVE-2024-7525

* CVE-2024-7526

* CVE-2024-7527

* CVE-2024-7528

* CVE-2024-7529

* CVE-2024-8381

* CVE-2024-8382

* CVE-2024-8384

* CVE-2024-8385

* CVE-2024-8386

* CVE-2024-8387

* CVE-2024-8394

CVSS scores:

* CVE-2024-6600 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

* CVE-2024-6601 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:3507-1
Release Date: 2024-10-01T15:02:22Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here