Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Thunderbird: Unauthorized Access to Email Data

published 1 year ago

Summary

A security update is available for Thunderbird, a popular email client. This update fixes a vulnerability that could allow an attacker to access your email account without your password, potentially leading to data theft or other malicious activities. You should install the update to ensure your email account remains secure.

What to do

Update redhat thunderbird to version 0:128.5.0-1.el8_2.
Update redhat thunderbird-debuginfo to version 0:128.5.0-1.el8_2.
Update redhat thunderbird-debugsource to version 0:128.5.0-1.el8_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird	< 0:128.5.0-1.el8_2 Fix: upgrade to 0:128.5.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird-debuginfo	< 0:128.5.0-1.el8_2 Fix: upgrade to 0:128.5.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird-debugsource	< 0:128.5.0-1.el8_2 Fix: upgrade to 0:128.5.0-1.el8_2

Original advisory text

Red Hat Security Advisory: thunderbird security update

References

https://access.redhat.com/errata/RHSA-2024:10704 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2325896 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328941 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328943 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328946 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328947 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328948 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2328950 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10704.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-11159 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11159 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11159 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2024-61/#CVE-2024-11159 Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2024-62/#CVE-2024-11159 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11692 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11692 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11692 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1909535 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-63/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-64/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-67/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-68/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11694 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11694 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11694 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1924167 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-65/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11695 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11695 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11695 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1925496 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11696 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11696 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11696 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1929600 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11697 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11697 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11697 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1842187 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-11699 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11699 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11699 Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1880582%2C1929911 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published3 Dec 2024

Updated23 Apr 2026

First seen23 Apr 2026

Sources

RHSA-2024:10704 · OSV

Track software like this

Free during beta