USN-5074-1 — firefox vulnerabilities

Summary

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass mixed
content blocking, or execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	firefox	92.0+build3-0ubuntu0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS	firefox	92.0+build3-0ubuntu0.20.04.1

Vulnerabilities 3

Unscored —

CVE-2021-38491

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerabi…

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Nov 3, 2021
Unscored —

CVE-2021-38493

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed e…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Nov 3, 2021
Unscored —

CVE-2021-38494

Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corr…

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Nov 3, 2021

References

report
https://ubuntu.com/security/CVE-2021-38491
report
https://ubuntu.com/security/CVE-2021-38493
report
https://ubuntu.com/security/CVE-2021-38494

firefox vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 3

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerabi…

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed e…

Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corr…

References