Red Hat Security Advisory

RHSA-2024:4670

thunderbird security update

Released 2024-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2024-06123 CVE-2024-6602 · GHSA-v6r5-wp7h-cj77

MEDIUM 51

A mismatch between allocator and deallocator could have led to memory corruption.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00985 Published 2024-07-09 Partial fix · 128, 115.13 CWE-94

TI-2024-06125 CVE-2024-6604 · GHSA-9vqr-5j64-p9wr

LOW 36

Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0054 Published 2024-07-09 Partial fix · 128, 115.13 CWE-120

TI-2024-06124 CVE-2024-6603 · GHSA-j476-hf2q-984g

LOW 35

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00537 Published 2024-07-09 Partial fix · 128, 115.13 CWE-823

TI-2024-06122 CVE-2024-6601 · GHSA-rjwc-235r-8986

LOW 22

A race condition could lead to a cross-origin container obtaining permissions of the top-level origin.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0039 Published 2024-07-09 Partial fix · 128, 115.13 CWE-367