Bug 2280387 (CVE-2024-4777)
| Summary: | CVE-2024-4777 Mozilla: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Robb Gatica <rgatica> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | abobrov, erack, gotiwari, jhorak, mvyas, tpopela |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | firefox 115.11, thunderbird 115.11 | Doc Type: | --- |
| Doc Text: |
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have been exploited to run arbitrary code.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2278893 | ||
|
Description
Robb Gatica
2024-05-14 18:37:54 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2888 https://access.redhat.com/errata/RHSA-2024:2888 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2024:2884 https://access.redhat.com/errata/RHSA-2024:2884 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Via RHSA-2024:2882 https://access.redhat.com/errata/RHSA-2024:2882 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2024:2886 https://access.redhat.com/errata/RHSA-2024:2886 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2024:2885 https://access.redhat.com/errata/RHSA-2024:2885 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2883 https://access.redhat.com/errata/RHSA-2024:2883 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2024:2887 https://access.redhat.com/errata/RHSA-2024:2887 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:2881 https://access.redhat.com/errata/RHSA-2024:2881 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2024:2905 https://access.redhat.com/errata/RHSA-2024:2905 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2024:2904 https://access.redhat.com/errata/RHSA-2024:2904 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:2906 https://access.redhat.com/errata/RHSA-2024:2906 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:2903 https://access.redhat.com/errata/RHSA-2024:2903 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2024:2911 https://access.redhat.com/errata/RHSA-2024:2911 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2024:2912 https://access.redhat.com/errata/RHSA-2024:2912 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:2913 https://access.redhat.com/errata/RHSA-2024:2913 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Via RHSA-2024:3338 https://access.redhat.com/errata/RHSA-2024:3338 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:3783 https://access.redhat.com/errata/RHSA-2024:3783 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:3784 https://access.redhat.com/errata/RHSA-2024:3784 |