RHSA-2024:7703HighCVSS 7.6

Red Hat Security Advisory: firefox security update

Published
October 7, 2024
Last Modified
September 25, 2026

🔗 CVE IDs covered (12)

CVE-2024-8900 →CVE-2024-9393 →CVE-2024-9398 →CVE-2024-9402 →CVE-2024-9403 →CVE-2024-9392 →CVE-2024-9394 →CVE-2024-9396 →CVE-2024-9397 →CVE-2024-9399 →CVE-2024-9400 →CVE-2024-9401 →

📋 Description

CVE-2024-8900 — firefox: Clipboard write permission bypass CVE-2024-9392 — firefox: thunderbird: Compromised content process can bypass site isolation CVE-2024-9393 — firefox: thunderbird: Cross-origin access to PDF contents through multipart responses CVE-2024-9394 — firefox: thunderbird: Cross-origin access to JSON contents through multipart responses CVE-2024-9396 — firefox: thunderbird: Potential memory corruption may occur when cloning certain objects CVE-2024-9397 — firefox: thunderbird: Potential directory upload bypass via clickjacking CVE-2024-9398 — firefox: thunderbird: External protocol handlers could be enumerated via popups CVE-2024-9399 — firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service CVE-2024-9400 — firefox: thunderbird: Potential memory corruption during JIT compilation CVE-2024-9401 — firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 CVE-2024-9402 — firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 CVE-2024-9403 — firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131

🎯 Affected products18

  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • firefox-0:128.3.0-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-0:128.3.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • firefox-0:128.3.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-0:128.3.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • firefox-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • firefox-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • firefox-debuginfo-0:128.3.0-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-debuginfo-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • firefox-debuginfo-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-debuginfo-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • firefox-debugsource-0:128.3.0-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-debugsource-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • firefox-debugsource-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • firefox-debugsource-0:128.3.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (14)