Threats Tagged 'cve-2024-12224'

This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird on Red Hat Enterprise Linux 7 Extended Lifecycle Support have been addressed in updates to Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. These vulnerabilities include sandbox escapes, same-origin policy bypass, memory safety bugs, information disclosure, integer overflow, and incorrect boundary conditions in various components such as Graphics Canvas2D, Layout, JavaScript GC, Networking Cache, and SVG. The update fixes these issues to improve security and stability.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.4 Extended Update Support. These vulnerabilities include sandbox escapes, same-origin policy bypass, memory safety bugs, information disclosure, integer overflow, and incorrect boundary conditions in various components. The fixes are included in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. Red Hat has released updates to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.2 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collector. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.0 updates. These vulnerabilities include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collection component. The fixes are included in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.4 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collection component. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.2. These include sandbox escapes, same-origin policy bypass, memory safety bugs, information disclosure, incorrect boundary conditions, and integer overflow. The update fixes these issues in Firefox ESR 140.3 and Thunderbird ESR 140.3. Red Hat rates the overall security impact as Important.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.6 variants. These vulnerabilities include sandbox escapes, same-origin policy bypass, memory safety bugs, information disclosure, integer overflow, and incorrect boundary conditions in various components such as Graphics Canvas2D, Layout, Networking Cache, SVG, and JavaScript GC. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. Red Hat rates this update as important and provides patches for affected versions.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.8 updates. These vulnerabilities include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, incorrect boundary conditions in the JavaScript GC component, and an integer overflow in the SVG component. Red Hat has rated these vulnerabilities as important and fixed them in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 9.4 Extended Update Support have been addressed in Thunderbird ESR 140.3. These include sandbox escapes, memory safety bugs, same-origin policy bypass, information disclosure, and integer overflow issues. Red Hat has rated this update as important and provides patches for affected versions.