Threat database

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.6 updates. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The fixes are included in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 packages provided by Red Hat. The update is rated as Important by Red Hat Product Security.