RHSA-2024:0971: Important: firefox security update

Published Feb 26, 2024
·
Updated

Important: firefox security update

Other sources

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.This update upgrades Firefox to version 115.8.0 ESR.Security Fix(es): Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547) Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553) Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548) Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549) Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550) Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551) Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

11 affected componentsFixes available
redhat/firefox<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox-debuginfo<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox-debugsource<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox-debuginfo<115.8.0-1.el8_4
115.8.0-1.el8_4
redhat/firefox-debugsource<115.8.0-1.el8_4
115.8.0-1.el8_4
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/firefox to a version that resolves this vulnerability.

    Fixed in 115.8.0-1.el8_4
  2. Upgrade

    Upgrade redhat/firefox-debuginfo to a version that resolves this vulnerability.

    Fixed in 115.8.0-1.el8_4
  3. Upgrade

    Upgrade redhat/firefox-debugsource to a version that resolves this vulnerability.

    Fixed in 115.8.0-1.el8_4
  4. Upgrade

    Upgrade Mozilla Firefox to a version that resolves this vulnerability.

    Fixed in 115.8.0 ESR
  5. Operational

    After installing the Firefox security update to 115.8.0 ESR, restart Firefox for the changes to take effect.

Event History

Feb 26, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·12:56 AM

Frequently Asked Questions

1

What is the severity of RHSA-2024:0971?

The severity of RHSA-2024:0971 is classified as important.

2

What does RHSA-2024:0971 address?

RHSA-2024:0971 addresses security vulnerabilities in the Firefox browser.

3

How do I fix RHSA-2024:0971?

To fix RHSA-2024:0971, update Firefox to version 115.8.0-1.el8_4.

4

Which versions of Firefox are affected by RHSA-2024:0971?

RHSA-2024:0971 affects Firefox versions below 115.8.0-1.el8_4.

5

What systems are impacted by RHSA-2024:0971?

RHSA-2024:0971 impacts Red Hat Enterprise Linux Server running Firefox.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203