RHSA-2024:10748HighCVSS 8.8

Red Hat Security Advisory: thunderbird security update

Published
December 3, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (7)

CVE-2024-11699 →CVE-2024-11159 →CVE-2024-11692 →CVE-2024-11694 →CVE-2024-11695 →CVE-2024-11696 →CVE-2024-11697 →

📋 Description

CVE-2024-11159 — thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message CVE-2024-11692 — firefox: thunderbird: Select list elements could be shown over another site CVE-2024-11694 — firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11695 — firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters CVE-2024-11696 — firefox: thunderbird: Unhandled Exception in Add-on Signature Verification CVE-2024-11697 — firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog CVE-2024-11699 — firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5

🎯 Affected products14

  • Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-0:128.5.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-0:128.5.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-0:128.5.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-0:128.5.0-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-0:128.5.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debuginfo-0:128.5.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debuginfo-0:128.5.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debuginfo-0:128.5.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debuginfo-0:128.5.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debugsource-0:128.5.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debugsource-0:128.5.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debugsource-0:128.5.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • thunderbird-debugsource-0:128.5.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (10)