This Red Hat security advisory addresses several vulnerabilities in Mozilla Firefox, fixed by upgrading to Firefox ESR 115.11.0. The issues include CVE-2024-4367 (arbitrary JavaScript execution in PDF.js), CVE-2024-4767 (IndexedDB files retained in private browsing mode), CVE-2024-4768 (permissions request bypass via clickjacking), CVE-2024-4769 (cross-origin response content-type distinction), CVE-2024-4770 (use-after-free when printing to PDF), and CVE-2024-4777 (memory safety bugs). The advisory covers Red Hat Enterprise Linux 8.6 Extended Update Support and related architectures. Red Hat provides updated Firefox packages to remediate these issues.

Successful exploitation of these vulnerabilities could lead to arbitrary JavaScript execution, privacy leaks due to retained IndexedDB files in private browsing, bypass of permissions requests, information disclosure through cross-origin content-type distinctions, use-after-free memory corruption, and other memory safety issues. These impacts can compromise browser security and user privacy. The advisory rates the overall security impact as important (high severity). No known exploits in the wild have been reported at this time.

Red Hat has released updated Firefox packages (version 115.11.0 ESR) that address these vulnerabilities. Users of Red Hat Enterprise Linux 8.6 Extended Update Support and related variants should apply this update promptly. Before applying, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available from Red Hat's official documentation. No additional mitigations are specified beyond applying the official update.