Summary
[115.4.0-1.0.1]
- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | firefox | 0:115.4.0-1.0.1.el9_2 |
| Oracle Linux · 9 | firefox-x11 | 0:115.4.0-1.0.1.el9_2 |
Vulnerabilities 7
-
High 7.5
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. …
-
High 7.5
During garbage collection extra operations were performed on a object that should not be. This could have led to a pote…
-
Unscored —
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
-
Unscored —
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to…
-
Unscored —
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to …
-
Unscored —
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence…
-
Unscored —
Address bar spoofing via bidirectional characters
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.