ALSA-2024:6682

See a problem?
Source
https://errata.almalinux.org/8/ALSA-2024-6682.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:6682.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2024:6682
Related
Published
2024-09-16T00:00:00Z
Modified
2024-09-19T12:53:41Z
Summary
Important: firefox security update
Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: 115.15/128.2 ESR ()
  • mozilla: Type confusion when looking up a property name in a "with" block (CVE-2024-8381)
  • mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382)
  • mozilla: Firefox did not ask before openings news: links in an external application (CVE-2024-8383)
  • mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384)
  • mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385)
  • mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386)
  • mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387)
  • mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / firefox

Package

Name
firefox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
128.2.0-1.el8_10.alma.1