Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 9: 2024-0334 moderate: Firefox multiple memory issues

mageia
Calendar Grey October 24, 2024
Dist Mageia Esm H88
Revised Thunderbird editions for Mageia tackle significant vulnerabilities and glitches, promoting a more secure mailing environment.
The updated package provides Firefox 128 for all mandatory arches of Mageia (x86_64, i586 and aarch64), fixing several bugs, including security vulnerabilities, for i586 and aarch6...

Summary

The updated package provides Firefox 128 for all mandatory arches of Mageia (x86_64, i586 and aarch64), fixing several bugs, including security vulnerabilities, for i586 and aarch64: Fullscreen notification dialog can be obscured by document content. (CVE-2024-7518) Out of bounds memory access in graphics shared memory handling. (CVE-2024-7519) Type confusion in WebAssembly. (CVE-2024-7520) Incomplete WebAssembly exception handing. (CVE-2024-7521) Out of bounds read in editor component. (CVE-2024-7522) CSP strict-dynamic bypass using web-compatibility shims. (CVE-2024-7524) Missing permission check when creating a StreamFilter. (CVE-2024-7525) Uninitialized memory used by WebGL. (CVE-2024-7526) Use-after-free in JavaScript garbage collection. (CVE-2024-7527) Use-after-free in IndexedDB. (CVE-2024-7528) Document content could partially obscure security prompts. (CVE-2024-7529) WASM type confusion involving ArrayTypes. (CVE-2024-8385) Type confusion when looking up a property name in ...

References

- https://bugs.mageia.org/show_bug.cgi?id=33607

- https://www.cve.org/CVERecord?id=CVE-2024-7519

- https://www.cve.org/CVERecord?id=CVE-2024-7520

- https://www.cve.org/CVERecord?id=CVE-2024-7521

- https://www.cve.org/CVERecord?id=CVE-2024-7522

- https://www.cve.org/CVERecord?id=CVE-2024-7524

- https://www.cve.org/CVERecord?id=CVE-2024-7525

- https://www.cve.org/CVERecord?id=CVE-2024-7526

- https://www.cve.org/CVERecord?id=CVE-2024-7527

- https://www.cve.org/CVERecord?id=CVE-2024-7528

- https://www.cve.org/CVERecord?id=CVE-2024-7529

- https://www.cve.org/CVERecord?id=CVE-2024-8385

- https://www.cve.org/CVERecord?id=CVE-2024-8381

- https://www.cve.org/CVERecord?id=CVE-2024-8382

- https://www.cve.org/CVERecord?id=CVE-2024-8383

- https://www.cve.org/CVERecord?id=CVE-2024-8384

- https://www.cve.org/CVERecord?id=CVE-2024-8386

- https://www.cve.org/CVERecord?id=CVE-2024-8387

- https://www.cve.org/CVERecord?id=CVE-2024-9680

Topics%20covered

Topics Covered

security advisory security issue information leak software update firefox memory access Mageia

Resolution

SRPMS

- 9/core/firefox-128.3.1-3.mga9

Publication date: 24 Oct 2024
URL: https://advisories.mageia.org/MGASA-2024-0334.html
Type: security
CVE: CVE-2024-7519, CVE-2024-7520, CVE-2024-7521, CVE-2024-7522, CVE-2024-7524, CVE-2024-7525, CVE-2024-7526, CVE-2024-7527, CVE-2024-7528, CVE-2024-7529, CVE-2024-8385, CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, CVE-2024-8384, CVE-2024-8386, CVE-2024-8387, CVE-2024-9680

Topics%20covered

Topics Covered

security advisory security issue information leak software update firefox memory access Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here