Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 115.10.0 ESR.
Security Fix(es):
* GetBoundName in the JIT returned the wrong object (CVE-2024-3852)
* Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854)
* Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857)
* Permission prompt input delay could expire when not in focus (CVE-2024-2609)
* Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859)
* Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861)
* Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
firefox-115.10.0-1.el8_9.alma.1.aarch64.rpm |
72076a2e9e6cdc3294ecf9430aaa3fcb71c43120a213fa9298e4873421aad712 |
ppc64le |
firefox-115.10.0-1.el8_9.alma.1.ppc64le.rpm |
29faa199f1af663a645c819bbedf9f2a74f2ca12f22976ac973ff56ce293b2d0 |
s390x |
firefox-115.10.0-1.el8_9.alma.1.s390x.rpm |
04afa60b0518f85c1b5192b1c58ccc436df6e78a01452609f2a23daf18b9b479 |
x86_64 |
firefox-115.10.0-1.el8_9.alma.1.x86_64.rpm |
31148429624aaf9c6331bedaf9ace50ebe096a0fc7077fae62b1db0a1abeeb6e |