ALSA-2024:1912
- Source
- https://errata.almalinux.org/8/ALSA-2024-1912.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:1912.json
- Related
-
- CVE-2024-2609
- CVE-2024-3852
- CVE-2024-3854
- CVE-2024-3857
- CVE-2024-3859
- CVE-2024-3861
- CVE-2024-3864
- Published
- 2024-04-18T00:00:00Z
- Modified
- 2024-04-22T08:21:39Z
- Details
-
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 115.10.0 ESR.
Security Fix(es):
GetBoundName in the JIT returned the wrong object (CVE-2024-3852)
Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854)
- Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857)
- Permission prompt input delay could expire when not in focus (CVE-2024-2609)
- Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859)
- Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861)
- Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:1912
- https://access.redhat.com/security/cve/CVE-2024-2609
- https://access.redhat.com/security/cve/CVE-2024-3852
- https://access.redhat.com/security/cve/CVE-2024-3854
- https://access.redhat.com/security/cve/CVE-2024-3857
- https://access.redhat.com/security/cve/CVE-2024-3859
- https://access.redhat.com/security/cve/CVE-2024-3861
- https://access.redhat.com/security/cve/CVE-2024-3864
- https://bugzilla.redhat.com/2275547
- https://bugzilla.redhat.com/2275549
- https://bugzilla.redhat.com/2275550
- https://bugzilla.redhat.com/2275551
- https://bugzilla.redhat.com/2275552
- https://bugzilla.redhat.com/2275553
- https://bugzilla.redhat.com/2275555
- https://errata.almalinux.org/8/ALSA-2024-1912.html