VDB

GCVE-110-MAGEIA-2024-49

GCVE-110-MAGEIA-2024-49
Advisory Published
Vulnetix · Advisory published February 27, 2024
The updated packages fix security vulnerabilities: Timing attack against RSA decryption in TLS. (CVE-2023-5388) Out-of-bounds memory read in networking channels. (CVE-2024-1546) Alert dialog could have been spoofed on another site. (CVE-2024-1547) Fullscreen Notification could have been hidden by select element. (CVE-2024-1548) Custom cursor could obscure the permission dialog. (CVE-2024-1549) Mouse cursor re-positioned unexpectedly could have led to unintended permission grants. (CVE-2024-1550) Multipart HTTP Responses would accept the Set-Cookie header in response parts. (CVE-2024-1551) Incorrect code generation on 32-bit ARM devices. (CVE-2024-1552) Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. (CVE-2024-1553)

Affected Products

VendorProductVersionsPlatforms
Mageiafirefox0 (affected), 115.8.0-1.mga9 (unaffected), 0 (affected), 115.8.0-1.mga9 (unaffected)
Mageiafirefox-l10n0 (affected), 115.8.0-1.mga9 (unaffected), 0 (affected), 115.8.0-1.mga9 (unaffected)
Mageiarootcerts0 (affected), 20240215.00-1.mga9 (unaffected), 20240215.00-1.mga9 (unaffected), 0 (affected)
Mageianss0 (affected), 3.98.0-1.mga9 (unaffected), 0 (affected), 3.98.0-1.mga9 (unaffected)
Mageiaultimatestunts0 (affected), 0.7.7-11.1.mga9 (unaffected)

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›