Skip to content

Instantly share code, notes, and snippets.

View lukeheath's full-sized avatar

Luke Heath lukeheath

View GitHub Profile
@lukeheath
lukeheath / resolving-critical-firefox-vulnerability.md
Last active December 11, 2024 22:14
Resolving a critical Firefox vulnerability using Fleet's new automation features

Resolving a critical Firefox vulnerability using Fleet's new automation features

When Mozilla announced a critical vulnerability in Firefox (CVE-2024-115), organizations were faced with the urgent need to update to version 132.0 to protect against arbitrary code execution. At Fleet, we were able to respond to this threat quickly and effectively using some of our latest features. Here’s how we leveraged Fleet’s new policy-based software installation and GitOps integration to resolve the issue across our macOS fleet seamlessly and without disruption.

Understanding the threat

The vulnerability, as detailed in a CISecurity advisory, could allow attackers to execute arbitrary code on devices run

@media (min-width: 480px){
#carousel{
h1{
font-size: 22px;
}
p{
font-size: 16px;
}
.carousel-paginate{
height: 40px;
jQuery(document).ready(function($) {
/* MEDIA MIND TRACKING ----------------*/
function mmFirePixel(mmActivityID) {
var ebRand = Math.random() + '';
ebRand = ebRand * 1000000;
var script = document.createElement('script');
script.type='text/javascript';