– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Gentoo Linux Security Advisory GLSA 202408-02
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
https:\/\/security.gentoo.org\/
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n
Severity: High
Title: Mozilla Firefox: Multiple Vulnerabilities
Date: August 06, 2024
Bugs: #930380, #932374, #935550
ID: 202408-02<\/p>\n
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n
Synopsis
========<\/p>\n
Multiple vulnerabilities have been discovered in Mozilla Firefox, the
worst of which could lead to remote code execution.<\/p>\n
Background
==========<\/p>\n
Mozilla Firefox is a popular open-source web browser from the Mozilla
project.<\/p>\n
Affected packages
=================<\/p>\n
Package Vulnerable Unaffected
———————- ————– —————
www-client\/firefox < 115.12.0:esr >= 115.12.0:esr
< 127.0:rapid >= 127.0:rapid
www-client\/firefox-bin < 115.12.0:esr >= 115.12.0:esr
< 127.0:rapid >= 127.0:rapid<\/p>\n
Description
===========<\/p>\n
Multiple vulnerabilities have been discovered in Mozilla Firefox. Please
review the CVE identifiers referenced below for details.<\/p>\n
Impact
======<\/p>\n
Please review the referenced CVE identifiers for details.<\/p>\n
Workaround
==========<\/p>\n
There is no known workaround at this time.<\/p>\n
Resolution
==========<\/p>\n
All Mozilla Firefox binary users should upgrade to the latest version:<\/p>\n
# emerge –sync
# emerge –ask –oneshot –verbose “>=www-client\/firefox-bin-127.0:rapid”<\/p>\n
All Mozilla Firefox users should upgrade to the latest version:<\/p>\n
# emerge –sync
# emerge –ask –oneshot –verbose “>=www-client\/firefox-127.0:rapid”<\/p>\n
All Mozilla Firefox ESR users should upgrade to the latest version:<\/p>\n
# emerge –sync
# emerge –ask –oneshot –verbose “>=www-client\/firefox-115.12.0:esr”<\/p>\n
All Mozilla Firefox ESR binary users should upgrade to the latest
version:<\/p>\n
# emerge –sync
# emerge –ask –oneshot –verbose “>=www-client\/firefox-bin-115.12.0:esr”<\/p>\n
References
==========<\/p>\n[ 1 ] CVE-2024-2609
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-2609
[ 2 ] CVE-2024-3302
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3302
[ 3 ] CVE-2024-3853
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3853
[ 4 ] CVE-2024-3854
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3854
[ 5 ] CVE-2024-3855
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3855
[ 6 ] CVE-2024-3856
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3856
[ 7 ] CVE-2024-3857
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3857
[ 8 ] CVE-2024-3858
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3858
[ 9 ] CVE-2024-3859
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3859
[ 10 ] CVE-2024-3860
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3860
[ 11 ] CVE-2024-3861
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3861
[ 12 ] CVE-2024-3862
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3862
[ 13 ] CVE-2024-3864
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3864
[ 14 ] CVE-2024-3865
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-3865
[ 15 ] CVE-2024-4764
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4764
[ 16 ] CVE-2024-4765
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4765
[ 17 ] CVE-2024-4766
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4766
[ 18 ] CVE-2024-4771
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4771
[ 19 ] CVE-2024-4772
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4772
[ 20 ] CVE-2024-4773
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4773
[ 21 ] CVE-2024-4774
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4774
[ 22 ] CVE-2024-4775
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4775
[ 23 ] CVE-2024-4776
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4776
[ 24 ] CVE-2024-4778
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-4778
[ 25 ] CVE-2024-5689
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5689
[ 26 ] CVE-2024-5693
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5693
[ 27 ] CVE-2024-5694
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5694
[ 28 ] CVE-2024-5695
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5695
[ 29 ] CVE-2024-5696
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5696
[ 30 ] CVE-2024-5697
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5697
[ 31 ] CVE-2024-5698
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5698
[ 32 ] CVE-2024-5699
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5699
[ 33 ] CVE-2024-5700
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5700
[ 34 ] CVE-2024-5701
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5701
[ 35 ] CVE-2024-5702
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-5702
[ 36 ] MFSA-2024-25
[ 37 ] MFSA-2024-26
[ 38 ] MFSA-2024-28<\/p>\n
Availability
============<\/p>\n
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:<\/p>\n
https:\/\/security.gentoo.org\/glsa\/202408-02<\/p>\n
Concerns?
=========<\/p>\n
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users’ machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https:\/\/bugs.gentoo.org.<\/p>\n
License
=======<\/p>\n
Copyright 2024 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).<\/p>\n
The contents of this document are licensed under the
Creative Commons – Attribution \/ Share Alike license.<\/p>\n
https:\/\/creativecommons.org\/licenses\/by-sa\/2.5<\/p>\n","protected":false},"excerpt":{"rendered":"
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –Gentoo Linux Security Advisory GLSA 202408-02– – – – – – – – – – – – – – – …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58653","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58653","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58653"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58653\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58653"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58653"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58653"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}