High ELSA-2021-0288 5 CVEs

Important: firefox security update (Oracle Linux 8)

Published Jan 28, 2021 · Updated Jan 28, 2021

Ecosystem: Oracle Linux

Summary

[78.7.0-2.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[78.7.0-2]
- Update to 78.7.0 build2

[78.7.0-1]
- Update to 78.7.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:78.7.0-2.0.1.el8_3

Vulnerabilities 5

Unscored —

CVE-2020-26976

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service w…

Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu Alpine

Jan 7, 2021
Unscored —

CVE-2021-23953

If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin informati…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23954

Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23960

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially ex…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23964

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021