Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Mageia 9: 2024-0222 Critical: NSS & Firefox JavaScript Bugs

mageia
Calendar Grey June 15, 2024
Dist Mageia Esm H88
Mageia 9 security notices have been released, spotlighting recent updates to nss and firefox packages that rectify severe networking and JavaScript vulnerabilities.
Use-after-free in networking

Summary

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691) Cross-Origin Image leak via Offscreen Canvas. (CVE-2024-5693) Memory Corruption in Text Fragments. (CVE-2024-5696) Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. (CVE-2024-5700)

References

- https://bugs.mageia.org/show_bug.cgi?id=33288

- https://www.firefox.com/en-US/firefox/115.12.0/releasenotes/?redirect_source=mozilla-org

- https://www.mozilla.org/en-US/security/advisories/mfsa2024-26/

- https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_101.html

- https://www.cve.org/CVERecord?id=CVE-2024-5702

- https://www.cve.org/CVERecord?id=CVE-2024-5688

- https://www.cve.org/CVERecord?id=CVE-2024-5690

- https://www.cve.org/CVERecord?id=CVE-2024-5691

- https://www.cve.org/CVERecord?id=CVE-2024-5693

- https://www.cve.org/CVERecord?id=CVE-2024-5696

- https://www.cve.org/CVERecord?id=CVE-2024-5700

Topics%20covered

Topics Covered

security advisory firefox networking updates NSS JavaScript Mageia

Resolution

SRPMS

- 9/core/nss-3.101.0-1.mga9

- 9/core/firefox-115.12.0-1.mga9

- 9/core/firefox-l10n-115.12.0-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 15 Jun 2024
URL: https://advisories.mageia.org/MGASA-2024-0222.html
Type: security
CVE: CVE-2024-5702, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700

Topics%20covered

Topics Covered

security advisory firefox networking updates NSS JavaScript Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here