[SECURITY] [DLA 3869-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3869-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 04, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5765-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5765-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2024 https://www.debian.org/security/faq -...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2024-40519)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

DLA-3869-1 firefox-esr - security update

Bulletin has no description...

DSA-5765-1 firefox-esr - security update

Bulletin has no description...

Debian dla-3869 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3869 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3869-1 [email protected]...

Debian dsa-5765 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5765 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5765-1 [email protected] https://www.debian.org/securit...

CVE-2024-8386

The Mozilla Foundation's Security Advisory: If a site had been granted permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack...

CVE-2024-8384

The Mozilla Foundation's Security Advisory: The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption...

CVE-2024-8382

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...

CVE-2024-8382

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had...

DEBIAN-CVE-2024-8383

Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing so for the Usenet-related schemes news: and snews:. Since most operating systems don't have a trusted newsreader...

CVE-2024-8385

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

CVE-2024-8381

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This vulnerability affects Firefox 130, Firefox ESR 128.2, Firefox ESR 115.15, Thunderbird 128.2, and Thunderbird 115.15...

CVE-2024-8384 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-8385 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-8387 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-8382 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-8385

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

CVE-2024-8386

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...