Red Hat Security Advisory: firefox security update
Multiple security vulnerabilities have been identified and fixed in Mozilla Firefox as part of a Red Hat security advisory. These include memory safety bugs, a race condition in permission assignment, and memory corruption during thread creation. The update addresses Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13. The advisory applies to Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vulnerabilities are rated with high severity by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 7 Extended Lifecycle Support versions should apply the provided Firefox update to mitigate these issues.
AI Analysis
Technical Summary
This Red Hat security advisory addresses three vulnerabilities in Mozilla Firefox and related products: CVE-2024-6601, a race condition in permission assignment; CVE-2024-6603, memory corruption in thread creation; and CVE-2024-6604, memory safety bugs. These issues were fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13. The advisory targets Red Hat Enterprise Linux 7 Extended Lifecycle Support versions and provides updated Firefox packages to remediate these vulnerabilities. No CVSS scores are provided in the advisory, but the severity is rated as important/high by Red Hat. No known exploits in the wild have been reported at the time of the advisory.
Potential Impact
The vulnerabilities include memory safety bugs, a race condition in permission assignment, and memory corruption during thread creation, which could potentially lead to security issues such as unauthorized permission changes or application crashes. The exact impact details and exploitability are not provided in the advisory. Red Hat rates the security impact as important, indicating these issues could affect system security if unpatched.
Mitigation Recommendations
Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the Firefox update as described in the Red Hat advisory RHSA-2024:4508 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update. Patch status is confirmed as available via the Red Hat update.
Red Hat Security Advisory: firefox security update
Description
Multiple security vulnerabilities have been identified and fixed in Mozilla Firefox as part of a Red Hat security advisory. These include memory safety bugs, a race condition in permission assignment, and memory corruption during thread creation. The update addresses Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13. The advisory applies to Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vulnerabilities are rated with high severity by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 7 Extended Lifecycle Support versions should apply the provided Firefox update to mitigate these issues.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory addresses three vulnerabilities in Mozilla Firefox and related products: CVE-2024-6601, a race condition in permission assignment; CVE-2024-6603, memory corruption in thread creation; and CVE-2024-6604, memory safety bugs. These issues were fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13. The advisory targets Red Hat Enterprise Linux 7 Extended Lifecycle Support versions and provides updated Firefox packages to remediate these vulnerabilities. No CVSS scores are provided in the advisory, but the severity is rated as important/high by Red Hat. No known exploits in the wild have been reported at the time of the advisory.
Potential Impact
The vulnerabilities include memory safety bugs, a race condition in permission assignment, and memory corruption during thread creation, which could potentially lead to security issues such as unauthorized permission changes or application crashes. The exact impact details and exploitability are not provided in the advisory. Red Hat rates the security impact as important, indicating these issues could affect system security if unpatched.
Mitigation Recommendations
Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the Firefox update as described in the Red Hat advisory RHSA-2024:4508 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update. Patch status is confirmed as available via the Red Hat update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:4508
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-6603","CVE-2024-6604"]
- Cvss Version
- null
Threat ID: 6a3da1f34853345fc183388b
Added to database: 06/25/2026, 21:47:31 UTC
Last enriched: 06/25/2026, 22:47:25 UTC
Last updated: 07/06/2026, 08:51:14 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.