Oracle Linux Security Advisory ELSA-2024-6681

http://linux.oracle.com/errata/ELSA-2024-6681.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-128.2.0-1.0.1.el9_4.x86_64.rpm
firefox-x11-128.2.0-1.0.1.el9_4.x86_64.rpm

aarch64:
firefox-128.2.0-1.0.1.el9_4.aarch64.rpm
firefox-x11-128.2.0-1.0.1.el9_4.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//firefox-128.2.0-1.0.1.el9_4.src.rpm

Related CVEs:

CVE-2024-7652
CVE-2024-8381
CVE-2024-8382
CVE-2024-8383
CVE-2024-8384
CVE-2024-8385
CVE-2024-8386
CVE-2024-8387




Description of changes:

[128.2.0-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[128.2.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[128.2.0-1]
- Update to 128.2.0

[115.10.0-1]
- Update to 115.10.0 build1

[115.9.1-2]
- Removed expat CVE fix

[115.9.1-1]
- Update to 115.9.1

[115.9.0-2]
- Update to 115.9.0 build2

[115.9.0-1]
- Update to 115.9.0 build1
- Fix expat CVE-2023-52425

[115.8.0-1]
- Update to 115.8.0 build1

[115.7.0-1]
- Update to 115.7.0 build1

[115.6.0-1]
- Update to 115.6.0 build1

[115.5.0-1]
- Update to 115.5.0 build1

[115.4.0-1]
- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL

[115.3.1-1]
- Update to 115.3.1

[115.3.0-1]
- Update to 115.3.0 ESR

[115.2.0-3]
- Update to 115.2.0 ESR

[115.1.0-1]
- Update to 115.1.0 ESR

[115.0.2-1]
- Update to 115.0.2 ESR

[115.0b8-1]
- Update to 115.0b8

[102.11.0-2]
- Update to 102.11.0 build2

[102.11.0-1]
- Update to 102.11.0 build1

[102.10.0-1]
- Update to 102.10.0 build1

[102.9.0-4]
- Update to 102.9.0 build2

[102.9.0-2]
- removed disable-openh264-download

[102.9.0-1]
- Update to 102.9.0 build1

[102.8.0-2]
- Update to 102.8.0 build2

[102.8.0-1]
- Update to 102.8.0 build1

[102.7.0-1]
- Update to 102.7.0 build1

[102.6.0-2]
- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9

[102.6.0-1]
- Update to 102.6.0 build1

[102.5.0-2]
- Added libwebrtc screencast patch for newer features

[102.5.0-1]
- Update to 102.5.0 build1

[102.4.0-1]
- Update to 102.4.0 build1

[102.3.0-7]
- Fix for expat CVE-2022-40674 and non functional webrtc


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata