Important: firefox security update

2024-05-1600:00:00

errata.almalinux.org

mozilla

update

cve-2024-4367

pdf.js

indexeddb

clickjacking

cross-origin

use-after-free

memory safety

thunderbird

unix

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64firefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux9x86_64firefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux9ppc64lefirefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux9ppc64lefirefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux9aarch64firefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux9aarch64firefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux9s390xfirefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.s390x.rpm
almalinux9s390xfirefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	x86_64	firefox-x11	< 115.11.0-1.el9_4.alma.1	firefox-x11-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux	9	x86_64	firefox	< 115.11.0-1.el9_4.alma.1	firefox-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux	9	ppc64le	firefox	< 115.11.0-1.el9_4.alma.1	firefox-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux	9	ppc64le	firefox-x11	< 115.11.0-1.el9_4.alma.1	firefox-x11-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux	9	aarch64	firefox-x11	< 115.11.0-1.el9_4.alma.1	firefox-x11-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux	9	aarch64	firefox	< 115.11.0-1.el9_4.alma.1	firefox-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux	9	s390x	firefox	< 115.11.0-1.el9_4.alma.1	firefox-115.11.0-1.el9_4.alma.1.s390x.rpm
almalinux	9	s390x	firefox-x11	< 115.11.0-1.el9_4.alma.1	firefox-x11-115.11.0-1.el9_4.alma.1.s390x.rpm