RHBA-2024:10782

csafUSredhat_csaf

Red Hat Bug Fix Advisory: Updated rhel9/firefox-flatpak container image

Advisory ansehen veröffentlicht 2024-12-04

An updated rhel9/firefox-flatpak container image is now available in the Red Hat container registry.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-11695US——
A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (1)

  • Behobenrhel9/firefox-flatpak@sha256:2b9901859d73038ca21a5dc847a86b6dd89298373d9f784e263cd535fa8a08a6_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)

    To install and use Red Hat Enterprise Linux Flatpak content available in the the Red Hat Container Catalog, make sure that you have the latest version of the Flatpak client installed on your system: yum update flatpak After updating the Flatpak packages, add the Flatpak remote to your system: flatpak remote-add rhel https://flatpaks.redhat.io/rhel.flatpakrepo Provide the credentials for your Red Hat Enterprise Linux account: podman login registry.redhat.io Podman only saves credentials until the user logs out. To save your credentials permanently, run: cp $XDG_RUNTIME_DIR/containers/auth.json $HOME/.config/flatpak/oci-auth.json To enable the RHEL Flatpak remote for a set of workstations within an organization, you should use a Registry Service Account. Credentials can be installed system-wide at /etc/flatpak/oci-auth.json. Then, you can install the Firefox Flatpak container image: flatpak install rhel org.firefox.Firefox For more information about the image, search the <image_name> in the Red Hat Ecosystem Catalog: https://catalog.redhat.com/software/containers/search.

    https://access.redhat.com/errata/RHBA-2024:10782
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan