RHSA-2024:1907: Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.<br>This update upgrades Firefox to version 115.10.0 ESR.<br>Security Fix(es):<br><li> GetBoundName in the JIT returned the wrong object (CVE-2024-3852)</li> <li> Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854)</li> <li> Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857)</li> <li> Permission prompt input delay could expire when not in focus (CVE-2024-2609)</li> <li> Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859)</li> <li> Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861)</li> <li> Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat