Bug 2265356 (CVE-2024-1553)
| Summary: | CVE-2024-1553 Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Mauro Matteo Cascella <mcascell> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | abobrov, gotiwari, jhorak, mvyas, tpopela |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | firefox 115.8, thunderbird 115.8 | Doc Type: | --- |
| Doc Text: |
The Mozilla Foundation Security Advisory describes this flaw as:
Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2263900 | ||
|
Description
Mauro Matteo Cascella
2024-02-21 16:22:03 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:0952 https://access.redhat.com/errata/RHSA-2024:0952 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:0955 https://access.redhat.com/errata/RHSA-2024:0955 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Enterprise Linux 8.2 Telecommunications Update Service Via RHSA-2024:0958 https://access.redhat.com/errata/RHSA-2024:0958 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2024:0959 https://access.redhat.com/errata/RHSA-2024:0959 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:0957 https://access.redhat.com/errata/RHSA-2024:0957 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:0963 https://access.redhat.com/errata/RHSA-2024:0963 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2024:0960 https://access.redhat.com/errata/RHSA-2024:0960 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2024:0969 https://access.redhat.com/errata/RHSA-2024:0969 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2024:0961 https://access.redhat.com/errata/RHSA-2024:0961 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2024:0971 https://access.redhat.com/errata/RHSA-2024:0971 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2024:0970 https://access.redhat.com/errata/RHSA-2024:0970 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:0964 https://access.redhat.com/errata/RHSA-2024:0964 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Enterprise Linux 8.2 Telecommunications Update Service Via RHSA-2024:0972 https://access.redhat.com/errata/RHSA-2024:0972 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2024:0962 https://access.redhat.com/errata/RHSA-2024:0962 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2024:0968 https://access.redhat.com/errata/RHSA-2024:0968 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:0976 https://access.redhat.com/errata/RHSA-2024:0976 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:0983 https://access.redhat.com/errata/RHSA-2024:0983 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:0984 https://access.redhat.com/errata/RHSA-2024:0984 |