Advisories ยป MGASA-2024-0334

Updated firefox packages fix security vulnerabilities

Publication date: 24 Oct 2024
Modification date: 24 Oct 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-7519 , CVE-2024-7520 , CVE-2024-7521 , CVE-2024-7522 , CVE-2024-7524 , CVE-2024-7525 , CVE-2024-7526 , CVE-2024-7527 , CVE-2024-7528 , CVE-2024-7529 , CVE-2024-8385 , CVE-2024-8381 , CVE-2024-8382 , CVE-2024-8383 , CVE-2024-8384 , CVE-2024-8386 , CVE-2024-8387 , CVE-2024-9680

Description

The updated package provides Firefox 128 for all mandatory arches of
Mageia (x86_64, i586 and aarch64), fixing several bugs, including
security vulnerabilities, for i586 and aarch64:
Fullscreen notification dialog can be obscured by document content.
(CVE-2024-7518)
Out of bounds memory access in graphics shared memory handling.
(CVE-2024-7519)
Type confusion in WebAssembly. (CVE-2024-7520)
Incomplete WebAssembly exception handing. (CVE-2024-7521)
Out of bounds read in editor component. (CVE-2024-7522)
CSP strict-dynamic bypass using web-compatibility shims. (CVE-2024-7524)
Missing permission check when creating a StreamFilter. (CVE-2024-7525)
Uninitialized memory used by WebGL. (CVE-2024-7526)
Use-after-free in JavaScript garbage collection. (CVE-2024-7527)
Use-after-free in IndexedDB. (CVE-2024-7528)
Document content could partially obscure security prompts.
(CVE-2024-7529)
WASM type confusion involving ArrayTypes. (CVE-2024-8385)
Type confusion when looking up a property name in a "with" block.
(CVE-2024-8381)
Internal event interfaces were exposed to web content when browser
EventHandler listener callbacks ran. (CVE-2024-8382)
links in an external application. (CVE-2024-8383: Firefox did not ask
before openings news)
Garbage collection could mis-color cross-compartment objects in OOM
conditions. (CVE-2024-8384)
SelectElements could be shown over another site if popups are allowed.
(CVE-2024-8386)
Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and
Thunderbird 128.2. (CVE-2024-8387)
Compromised content process can bypass site isolation. (CVE-2024-9392)
Cross-origin access to PDF contents through multipart responses.
(CVE-2024-9393)
Cross-origin access to JSON contents through multipart responses.
(CVE-2024-9394)
Clipboard write permission bypass. (CVE-2024-8900)
Potential memory corruption may occur when cloning certain objects.
(CVE-2024-9396)
Potential directory upload bypass via clickjacking. (CVE-2024-9397)
External protocol handlers could be enumerated via popups.
(CVE-2024-9398)
Specially crafted WebTransport requests could lead to denial of service.
(CVE-2024-9399)
Potential memory corruption during JIT compilation. (CVE-2024-9400)
Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR
128.3, Thunderbird 131, and Thunderbird 128.3. (CVE-2024-9401)
Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird
131, and Thunderbird 128.3. (CVE-2024-9402)
Use-after-free in Animation timeline. (CVE-2024-9680)

References

SRPMS

9/core