[ALSA-2024:1912] Important: firefox security update
Type:
security
Severity:
important
Release date:
2024-04-22
Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.10.0 ESR. Security Fix(es): * GetBoundName in the JIT returned the wrong object (CVE-2024-3852) * Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854) * Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857) * Permission prompt input delay could expire when not in focus (CVE-2024-2609) * Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859) * Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861) * Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 firefox-115.10.0-1.el8_9.alma.1.aarch64.rpm 72076a2e9e6cdc3294ecf9430aaa3fcb71c43120a213fa9298e4873421aad712
ppc64le firefox-115.10.0-1.el8_9.alma.1.ppc64le.rpm 29faa199f1af663a645c819bbedf9f2a74f2ca12f22976ac973ff56ce293b2d0
s390x firefox-115.10.0-1.el8_9.alma.1.s390x.rpm 04afa60b0518f85c1b5192b1c58ccc436df6e78a01452609f2a23daf18b9b479
x86_64 firefox-115.10.0-1.el8_9.alma.1.x86_64.rpm 31148429624aaf9c6331bedaf9ace50ebe096a0fc7077fae62b1db0a1abeeb6e
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.