This Red Hat security advisory addresses multiple vulnerabilities in Mozilla Firefox ESR, fixed by upgrading to version 115.11.0 ESR. Key issues include CVE-2024-4367 (arbitrary JavaScript execution in PDF.js), CVE-2024-4767 (IndexedDB files retained in private browsing mode), CVE-2024-4768 (permissions request bypass via clickjacking), CVE-2024-4769 (cross-origin response content-type distinction), CVE-2024-4770 (use-after-free when printing to PDF), and CVE-2024-4777 (memory safety bugs). The update is provided for Red Hat Enterprise Linux 8.2 AUS and addresses these security flaws to improve browser security and stability.

The vulnerabilities fixed in this update could allow arbitrary JavaScript execution, privacy leaks through retained IndexedDB files in private browsing, bypass of permissions requests via clickjacking, information disclosure through cross-origin response content-type distinctions, use-after-free memory corruption when printing to PDF, and other memory safety issues. These issues collectively pose risks of unauthorized code execution, privacy violations, and potential browser crashes or instability. Red Hat rates the security impact as important.

Red Hat has released an official security update upgrading Firefox ESR to version 115.11.0, which addresses all listed vulnerabilities. Users of affected Red Hat Enterprise Linux 8.2 AUS systems should apply this update promptly. Before applying, ensure all previous relevant errata are installed. No additional mitigation steps are indicated beyond applying the official update.