[ALSA-2023:6187] Important: firefox security update
Type:
security
Severity:
important
Release date:
2023-11-09
Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.4.0 ESR. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 firefox-115.4.0-1.el8_8.alma.1.aarch64.rpm d9653331c6afb789c171e8d2cddcae1e86823162c1814565ffeb98e1c2b80277
ppc64le firefox-115.4.0-1.el8_8.alma.1.ppc64le.rpm 3f9f362649a37b9014779d99a52955b05cbc32b70a8a296331ae0d59dc50265a
s390x firefox-115.4.0-1.el8_8.alma.1.s390x.rpm 9209f41bbc056c3e63ba34b29fd4e3c9a22d9c41af8a4123390e891b299dc17c
x86_64 firefox-115.4.0-1.el8_8.alma.1.x86_64.rpm 47e94002ccb92ba85613f4b39b41b40b9cfdd01fd3638ebe7b0565470317535d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.