Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9 updates. These include use-after-free bugs, memory safety issues, privilege escalation, sandbox escapes, incorrect boundary conditions, integer overflows, race conditions, undefined behavior, information disclosure, denial-of-service, and mitigation bypasses across various components such as the JavaScript engine, graphics subsystems, WebRTC signaling, and networking. The update fixes these issues in Firefox ESR 115.34, ESR 140.9, Firefox 149, Thunderbird ESR 140.9, and Thunderbird 149.
Multiple security vulnerabilities have been identified and fixed in Mozilla Thunderbird ESR 140.6.0 and Firefox ESR 140.6, including use-after-free, sandbox escape, privilege escalation, JIT miscompilation, same-origin policy bypass, and memory safety bugs. These issues affect components such as WebRTC signaling, Graphics CanvasWebGL, DOM Notifications, JavaScript Engine JIT, Netmonitor, and Request Handling. The update addresses these vulnerabilities to improve security and stability.
A security update for Mozilla Firefox addresses multiple vulnerabilities including mitigation bypasses, use-after-free conditions, same-origin policy bypasses, race conditions, and spoofing issues across various browser components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. These vulnerabilities affect Red Hat Enterprise Linux 9.2 distributions and related variants. The update is rated as Important by Red Hat Product Security and fixes nine distinct CVEs. No CVSS scores are provided in the advisory. The update is available through Red Hat's official channels.
A security update for Mozilla Firefox addresses multiple vulnerabilities including memory safety bugs, out-of-bounds read/write, use-after-free, cross-process information leaks, and improper handling of OBJECT tag attributes. These issues affect Firefox and Thunderbird components and have been fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144, and Thunderbird 144. The update is rated as important by Red Hat Product Security and applies to Red Hat Enterprise Linux 9.2 variants.
Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird on Red Hat Enterprise Linux 7 Extended Lifecycle Support have been addressed in updates to Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. These include sandbox escapes, same-origin policy bypass, memory safety bugs, information disclosure, integer overflow, and incorrect boundary conditions in various components such as Graphics Canvas2D, Layout, JavaScript GC, Networking Cache, and SVG. The update fixes these issues to improve security and stability.