ELSA-2021-0656 — Critical: firefox security update (Oracle Linux 7)

Summary

[78.8.0-1.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[78.8.0-1]
- Update to 78.8.0 build2

[78.7.1-1]
- Update to 78.7.1

[78.7.0-3]
- Fixing install prefix for the homepage

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:78.8.0-1.0.1.el7_9

Vulnerabilities 4

Unscored —

CVE-2021-23968

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reporte…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure th…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23973

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conte…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021
Unscored —

CVE-2021-23978

Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 26, 2021

Critical: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 4

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reporte…

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure th…

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conte…

Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…