Red Hat Security AdvisoryRHSA-2024:4610
firefox security update
Released 2024-07-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) firefox-115.13.0-3.el8_4
- Red Hat Enterprise Linux AppStream E4S (v.8.4) firefox-115.13.0-3.el8_4
- Red Hat Enterprise Linux AppStream TUS (v.8.4) firefox-115.13.0-3.el8_4
Fixes 3 records
Priority LOW 36
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.0054 · Published 2024-07-09 · Partial fix · 128, 115.13 CWE-120
Priority LOW 35
In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00537 · Published 2024-07-09 · Partial fix · 128, 115.13 CWE-823
Priority LOW 22
A race condition could lead to a cross-origin container obtaining permissions of the top-level origin.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.0039 · Published 2024-07-09 · Partial fix · 128, 115.13 CWE-367
