ALSA-2024:0608 - Important: Firefox Security Update
Summary
ALSA-2024:0608: Important: firefox security update. Affects firefox versions < 115.7.0-1.el8_9.alma.1. Fixed in 115.7.0-1.el8_9.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is an open-source web browser known for its compliance with web standards, performance, and portability. It is widely used by individuals and organizations for browsing the internet. However, a recent security update is required to address several vulnerabilities in Firefox.
Vulnerability Detail
The latest version of Firefox, 115.7.0 ESR, includes fixes for multiple security issues. These vulnerabilities could potentially lead to various security risks, such as out of bounds write, failure to update user input timestamp, crash when listing printers on Linux, bypass of Content Security Policy, phishing site popup showing local origin in the address bar, potential permissions request bypass via clickjacking, privilege escalation through devtools, and bypassing HSTS policy on subdomains. Additionally, memory safety bugs have been fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7.
How To Fix
Minimum fixed version
115.7.0-1.el8_9.alma.1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Mozilla Firefox users are advised to update their browsers to version 115.7.0 ESR or later to address the identified vulnerabilities. Keeping the browser up to date will help ensure a safer browsing experience. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for firefox →
FAQ
Mozilla Firefox is an open-source web browser known for its compliance with web standards, performance, and portability.
These vulnerabilities could lead to various security risks, such as out of bounds write, failure to update user input timestamp, crash when listing printers on Linux, bypass of Content Security Policy, phishing site popup showing local origin in the address bar, potential permissions request bypass via clickjacking, privilege escalation through devtools, and bypassing HSTS policy on subdomains.
To fix these vulnerabilities, it is recommended to update Firefox to version 115.7.0 ESR or later. Users can download the latest version from the official Mozilla website or use their operating system's package manager to update the browser.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to update Firefox to the latest version.
More details about these vulnerabilities, including their impact, CVSS scores, acknowledgments, and related information, can be found on the respective CVE pages listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
