Unscored DSA-4840-1 5 CVEs

firefox-esr - security update

Published Jan 27, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	firefox-esr	78.7.0esr-1~deb10u1

Vulnerabilities 5

Unscored —

CVE-2020-26976

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service w…

Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu Alpine

Jan 7, 2021
Unscored —

CVE-2021-23953

If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin informati…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23954

Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23960

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially ex…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23964

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021