Bug 2328947 (CVE-2024-11699) - CVE-2024-11699 firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5
Summary: CVE-2024-11699 firefox: thunderbird: Memory safety bugs fixed in Firefox 133,...
Keywords:
Status: NEW
Alias: CVE-2024-11699
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-26 14:02 UTC by OSIDB Bzimport
Modified: 2024-12-09 09:26 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:10591 0 None None None 2024-12-02 01:51:57 UTC
Red Hat Product Errata RHSA-2024:10592 0 None None None 2024-12-02 01:24:19 UTC
Red Hat Product Errata RHSA-2024:10667 0 None None None 2024-12-02 11:40:51 UTC
Red Hat Product Errata RHSA-2024:10702 0 None None None 2024-12-02 16:52:23 UTC
Red Hat Product Errata RHSA-2024:10703 0 None None None 2024-12-02 17:14:03 UTC
Red Hat Product Errata RHSA-2024:10704 0 None None None 2024-12-02 17:15:15 UTC
Red Hat Product Errata RHSA-2024:10710 0 None None None 2024-12-02 18:56:59 UTC
Red Hat Product Errata RHSA-2024:10733 0 None None None 2024-12-03 01:44:33 UTC
Red Hat Product Errata RHSA-2024:10734 0 None None None 2024-12-03 06:30:42 UTC
Red Hat Product Errata RHSA-2024:10742 0 None None None 2024-12-03 11:30:01 UTC
Red Hat Product Errata RHSA-2024:10743 0 None None None 2024-12-03 11:21:07 UTC
Red Hat Product Errata RHSA-2024:10745 0 None None None 2024-12-03 11:33:58 UTC
Red Hat Product Errata RHSA-2024:10748 0 None None None 2024-12-03 12:22:03 UTC
Red Hat Product Errata RHSA-2024:10752 0 None None None 2024-12-03 14:00:00 UTC
Red Hat Product Errata RHSA-2024:10844 0 None None None 2024-12-05 11:15:53 UTC
Red Hat Product Errata RHSA-2024:10848 0 None None None 2024-12-05 14:00:01 UTC
Red Hat Product Errata RHSA-2024:10849 0 None None None 2024-12-05 14:01:35 UTC
Red Hat Product Errata RHSA-2024:10880 0 None None None 2024-12-09 09:26:07 UTC
Red Hat Product Errata RHSA-2024:10881 0 None None None 2024-12-09 09:25:17 UTC

Description OSIDB Bzimport 2024-11-26 14:02:43 UTC 
Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
Comment 3 errata-xmlrpc 2024-12-02 01:24:18 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:10592 https://access.redhat.com/errata/RHSA-2024:10592
Comment 4 errata-xmlrpc 2024-12-02 01:51:56 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:10591 https://access.redhat.com/errata/RHSA-2024:10591
Comment 5 errata-xmlrpc 2024-12-02 11:40:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:10667 https://access.redhat.com/errata/RHSA-2024:10667
Comment 6 errata-xmlrpc 2024-12-02 16:52:22 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:10702 https://access.redhat.com/errata/RHSA-2024:10702
Comment 7 errata-xmlrpc 2024-12-02 17:14:02 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2024:10703 https://access.redhat.com/errata/RHSA-2024:10703
Comment 8 errata-xmlrpc 2024-12-02 17:15:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:10704 https://access.redhat.com/errata/RHSA-2024:10704
Comment 9 errata-xmlrpc 2024-12-02 18:56:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:10710 https://access.redhat.com/errata/RHSA-2024:10710
Comment 10 errata-xmlrpc 2024-12-03 01:44:32 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:10733 https://access.redhat.com/errata/RHSA-2024:10733
Comment 11 errata-xmlrpc 2024-12-03 06:30:41 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2024:10734 https://access.redhat.com/errata/RHSA-2024:10734
Comment 12 errata-xmlrpc 2024-12-03 11:21:06 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2024:10743 https://access.redhat.com/errata/RHSA-2024:10743
Comment 13 errata-xmlrpc 2024-12-03 11:30:00 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2024:10742 https://access.redhat.com/errata/RHSA-2024:10742
Comment 14 errata-xmlrpc 2024-12-03 11:33:57 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:10745 https://access.redhat.com/errata/RHSA-2024:10745
Comment 15 errata-xmlrpc 2024-12-03 12:22:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2024:10748 https://access.redhat.com/errata/RHSA-2024:10748
Comment 16 errata-xmlrpc 2024-12-03 13:59:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:10752 https://access.redhat.com/errata/RHSA-2024:10752
Comment 17 errata-xmlrpc 2024-12-05 11:15:52 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:10844 https://access.redhat.com/errata/RHSA-2024:10844
Comment 18 errata-xmlrpc 2024-12-05 14:00:00 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:10848 https://access.redhat.com/errata/RHSA-2024:10848
Comment 19 errata-xmlrpc 2024-12-05 14:01:34 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:10849 https://access.redhat.com/errata/RHSA-2024:10849
Comment 20 errata-xmlrpc 2024-12-09 09:25:16 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2024:10881 https://access.redhat.com/errata/RHSA-2024:10881
Comment 21 errata-xmlrpc 2024-12-09 09:26:06 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2024:10880 https://access.redhat.com/errata/RHSA-2024:10880
Note You need to log in before you can comment on or make changes to this bug.