Summary
[128.2.0-1.0.2]
- Fix prefs for new nss [Orabug: 37079813]
[128.2.0-1.0.1]
- Add Oracle prefs
[128.2.0]
- Add OpenELA debranding
[128.2.0-1]
- Update to 128.2.0
[128.1.1-2]
- Update to 128.1.1
[128.0-1]
- Update to 128.0 final
[128.0b4-1]
- Update to 128.0b4
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | thunderbird | 0:128.2.0-1.0.2.el9_4 |
Vulnerabilities 8
-
Critical 9.8CVE-2024-8381 Public exploit
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …
-
Critical 9.8
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right…
-
Critical 9.8
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confus…
-
Critical 9.8
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence…
-
High 8.8
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for t…
-
High 7.5
Type Confusion in Async Generators in Javascript Engine
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.1…
-
Medium 6.5
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a …
-
Medium 6.1
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of ano…