Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 115.4.0 ESR.
Security Fix(es):
* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)
* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)
* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)
* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)
* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)
* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
firefox-115.4.0-1.el8_8.alma.1.aarch64.rpm |
d9653331c6afb789c171e8d2cddcae1e86823162c1814565ffeb98e1c2b80277 |
ppc64le |
firefox-115.4.0-1.el8_8.alma.1.ppc64le.rpm |
3f9f362649a37b9014779d99a52955b05cbc32b70a8a296331ae0d59dc50265a |
s390x |
firefox-115.4.0-1.el8_8.alma.1.s390x.rpm |
9209f41bbc056c3e63ba34b29fd4e3c9a22d9c41af8a4123390e891b299dc17c |
x86_64 |
firefox-115.4.0-1.el8_8.alma.1.x86_64.rpm |
47e94002ccb92ba85613f4b39b41b40b9cfdd01fd3638ebe7b0565470317535d |