Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-8025

Опубликовано: 14 окт. 2024
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2024-8025: thunderbird security update (IMPORTANT)

[128.3.1-1.0.1]

  • Fix prefs for new nss [Orabug: 37079813]
  • Add Oracle prefs

[128.3.1]

  • Add OpenELA debranding

[128.3.1-1]

  • Update to 128.3.1

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

thunderbird

128.3.1-1.0.1.el9_4

Oracle Linux x86_64

thunderbird

128.3.1-1.0.1.el9_4

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
8 месяцев назад

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

CVSS3: 9.8
redhat
8 месяцев назад

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

CVSS3: 9.8
nvd
8 месяцев назад

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

CVSS3: 9.8
debian
8 месяцев назад

An attacker was able to achieve code execution in the content process ...

suse-cvrf
8 месяцев назад

Security update for MozillaThunderbird