Vulnerability CVE-2024-2616: Information

Description

To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-2616
Published: March 19, 2024
Modified: March 25, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefox-esrsisyphus115.9.1-alt1115.10.0-alt1ALT-PU-2024-4963-2344244Fixed
firefox-esrsisyphus_loongarch64115.9.1-alt1115.10.0-alt1ALT-PU-2024-5937-1-Fixed
firefox-esrp10115.9.1-alt1115.10.0-alt1ALT-PU-2024-4971-3344254Fixed
firefox-esrc10f1115.9.1-alt0.c10.1115.9.1-alt0.c10.1ALT-PU-2024-6027-2344289Fixed
thunderbirdsisyphus115.9.0-alt1115.9.0-alt1ALT-PU-2024-4973-2344245Fixed
thunderbirdsisyphus_loongarch64115.9.0-alt1115.9.0-alt1ALT-PU-2024-5939-1-Fixed
thunderbirdp10115.9.0-alt1115.9.0-alt1ALT-PU-2024-5117-3344280Fixed
thunderbirdc10f1115.9.0-alt0.c10.1115.9.0-alt0.c10.1ALT-PU-2024-6213-2344693Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1846197
    https://www.mozilla.org/security/advisories/mfsa2024-13/
      https://www.mozilla.org/security/advisories/mfsa2024-14/
        https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html
          https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
            VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
            Version: v24.4.2
            Back to top