Linux · Security advisory · October 10, 2024

RHSA-2024:7977: firefox security update

RHSA-2024:7977, released October 10, 2024, fixes 1 CVE in firefox (version 0:128.3.1-2.el8_10). One of them is being exploited (CVE-2024-9680); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
1
None rated Critical
Exploited
1
CVE-2024-9680
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2318
97th percentile

Fixed package versions

ProductReleaseFixed in
firefoxRHEL 80:128.3.1-2.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability 9.8 0.2318 KEVRansomwareExploited
Showing 1 to 1 of 1 1