Summary
[115.9.1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file
[115.9.1]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)
[115.9.1-1]
- Update to 115.9.1
[115.9.0-2]
- Update to 115.9.0 build2
[115.9.0-1]
- Update to 115.9.0 build1
- Fix expat CVE-2023-52425
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | firefox | 0:115.9.1-1.0.1.el9_3 |
| Oracle Linux · 9 | firefox-x11 | 0:115.9.1-1.0.1.el9_3 |
Vulnerabilities 10
-
High 8.8
Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence…
-
High 8.4
`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienc…
-
High 8.4
An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript executio…
-
High 8.1
Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue on…
-
High 8.1
If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or p…
-
High 7.5
An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability a…
-
Medium 6.5
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow…
-
Medium 6.1
Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content…
-
Medium 5.5
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permiss…
-
Low 2.7
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt t…