Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 5

• Critical 9.8
  CVE-2021-4127

  An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vuln…

  Mozilla Thunderbird Firefox ESR thunderbird Browsers Debian
  Dec 22, 2022
• Unscored —
  CVE-2021-23981

  A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 31, 2021
• Unscored —
  CVE-2021-23982

  Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 31, 2021
• Unscored —
  CVE-2021-23984

  A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an addres…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 31, 2021
• Unscored —
  CVE-2021-23987

  Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 31, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942783
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942785
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942787
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0989.json
• report
  https://access.redhat.com/security/cve/CVE-2021-4127
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4127
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4127
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-4127
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-4127
• report
  https://access.redhat.com/security/cve/CVE-2021-23981
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23981
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23981
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23981
• report
  https://access.redhat.com/security/cve/CVE-2021-23982
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23982
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23982
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23982
• report
  https://access.redhat.com/security/cve/CVE-2021-23984
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23984
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23984
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23984
• report
  https://access.redhat.com/security/cve/CVE-2021-23987
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23987
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23987
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23987