ELSA-2024-7958 — Important: firefox security update (Oracle Linux 9)

Summary

[128.3.1-2.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[128.3.1]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[128.3.1-1]
- Update to 128.3.1

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	firefox	0:128.3.1-2.0.1.el9_4
Oracle Linux · 9	firefox-x11	0:128.3.1-2.0.1.el9_4

Vulnerabilities 1

Critical 9.8

CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi

Oct 9, 2024
KEV Oct 15, 2024

Important: firefox security update (Oracle Linux 9)

Summary

Fixed packages 2

Vulnerabilities 1

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…