Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:
MozillaFirefox is updated to the 140ESR series.
Firefox Extended Support Release 140.0esr ESR:
* General
- Reader View now has an enhanced Text and Layout menu with
new options for character spacing, word spacing, and text
alignment. These changes offer a more accessible reading
experience.
- Reader View now has a Theme menu with additional Contrast
and Gray options. You can also select custom colors for text,
background, and links from the Custom tab.
- Firefox will now offer to temporarily remember when users
grant per
This update for MozillaFirefox fixes the following issues:
Update to Firefox Extended Support Release 128.1.0 ESR (MFSA 2024-35, bsc#1228648)
- CVE-2024-7518: Fullscreen notification dialog can be obscured by document
- CVE-2024-7519: Out of bounds memory access in graphics shared memory handling
- CVE-2024-7520: Type confusion in WebAssembly
- CVE-2024-7521: Incomplete WebAssembly exception handing
- CVE-2024-7522: Out of bounds read in editor component
- CVE-2024-7524: CSP strict-dynamic bypass using web-compatibility shims
- CVE-2024-7525: Missing permission check when creating a StreamFilter
- CVE-2024-7526: Uninitial