[SUSE-SU-2024:1858-1] Security update for MozillaThunderbird
Severity
Important
CVEs
6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
Update to version 115.11 (bsc#1224056):
- CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
- CVE-2024-4767: IndexedDB files retained in private browsing mode
- CVE-2024-4768: Potential permissions request bypass via clickjacking
- CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types
- CVE-2024-4770: Use-after-free could occur when printing to PDF
- CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
- fixed: Splitter arrow between task list and task description did not behave as expected
- fixed: Calendar Event Attendees dialog had incorrectly sized rows
- ID
- SUSE-SU-2024:1858-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2024/suse-su-20241858-1/
- Published
-
2024-05-30T12:13:47
(3 months ago) - Modified
-
2024-05-30T12:13:47
(3 months ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
- ALAS2-2024-2561
- ALSA-2024:2883
- ALSA-2024:2888
- ALSA-2024:3783
- ALSA-2024:3784
- DSA-5691-1
- DSA-5693-1
- DSA-5742-1
- ELSA-2024-2881
- ELSA-2024-2883
- ELSA-2024-2888
- ELSA-2024-2913
- ELSA-2024-3783
- ELSA-2024-3784
- FREEBSD:F848EF90-1848-11EF-9850-001B217B3468
- MFSA-2024-21
- MFSA-2024-22
- MFSA-2024-23
- NPM:GHSA-WGRM-67XF-HHPQ
- RHSA-2024:2881
- RHSA-2024:2883
- RHSA-2024:2888
- RHSA-2024:2913
- RHSA-2024:3783
- RHSA-2024:3784
- RLSA-2024:2888
- RLSA-2024:3783
- RLSA-2024:3784
- SSA:2024-135-01
- SSA:2024-164-01
- SUSE-SU-2024:1676-1
- SUSE-SU-2024:1770-1
- USN-6779-1
- USN-6782-1
Source | # ID | Name | URL |
---|---|---|---|
Suse | SUSE ratings | https://www.suse.com/support/security/rating/ | |
Suse | URL of this CSAF notice | https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1858-1.json | |
Suse | URL for SUSE-SU-2024:1858-1 | https://www.suse.com/support/update/announcement/2024/suse-su-20241858-1/ | |
Suse | E-Mail link for SUSE-SU-2024:1858-1 | https://lists.suse.com/pipermail/sle-security-updates/2024-August/019264.html | |
Bugzilla | SUSE Bug 1224056 | https://bugzilla.suse.com/1224056 | |
CVE | SUSE CVE CVE-2024-4367 page | https://www.suse.com/security/cve/CVE-2024-4367/ | |
CVE | SUSE CVE CVE-2024-4767 page | https://www.suse.com/security/cve/CVE-2024-4767/ | |
CVE | SUSE CVE CVE-2024-4768 page | https://www.suse.com/security/cve/CVE-2024-4768/ | |
CVE | SUSE CVE CVE-2024-4769 page | https://www.suse.com/security/cve/CVE-2024-4769/ | |
CVE | SUSE CVE CVE-2024-4770 page | https://www.suse.com/security/cve/CVE-2024-4770/ | |
CVE | SUSE CVE CVE-2024-4777 page | https://www.suse.com/security/cve/CVE-2024-4777/ |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |