Closed Bug 1957055 Opened 1 year ago Closed 1 year ago

thunderbird 128: CVE-2024-10468

Categories

(Thunderbird :: Untriaged, defect)

Product:
Thunderbird
Component:
Untriaged
Version:
Thunderbird 128
Type:
defect

Tracking

(thunderbird_esr128 wontfix)

Status:
RESOLVED DUPLICATE of bug 1914982
Tracking Flags:
Tracking Status
thunderbird_esr128 --- wontfix

People

(Reporter: petr.sumbera, Unassigned)

Details

Steps to reproduce:

From: https://www.mozilla.org/en-US/security/advisories/mfsa2024-55/

It's not clear whether CVE-2024-10468 affects also version branch 128 and thus remains unfixed.

According to core bug 1914982, it is not planned to uplift this to esr 128.

Group: mail-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 1 year ago
Duplicate of bug: CVE-2024-10468
Resolution: --- → DUPLICATE

The question was rather whether Thunderbird 128 is affected by CVE-2024-10468. I don't have access to 1914982. But it sounds to me TB 128 is affected. But the fix is not planned.

Only debug builds affected and won't get backported.

status-thunderbird_esr128: --- → wontfix
You need to log in before you can comment on or make changes to this bug.