Critical ELSA-2021-0655 4 CVEs

Critical: firefox security update (Oracle Linux 8)

Published Feb 26, 2021 · Updated Feb 26, 2021

Ecosystem: Oracle Linux

Summary

[78.8.0-1.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[78.8.0-1]
- Update to 78.8.0 build2

[78.7.1-1]
- Update to 78.7.1

[78.7.0-3]
- Fixing install prefix for the homepage

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:78.8.0-1.0.1.el8_3

Vulnerabilities 4

Unscored —

CVE-2021-23968

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reporte…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure th…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23973

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conte…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23978

Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021