SCIENTIFIC-LINUX-ERRATA Archives

January 2021

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Content-Type:
text/plain; charset="utf-8"
Date:
Wed, 27 Jan 2021 21:16:32 -0000
Reply-To:
[log in to unmask]
Subject:
Security ERRATA Important: firefox on SL7.x x86_64
MIME-Version:
1.0
Message-ID:
<[log in to unmask]>
Content-Transfer-Encoding:
7bit
Sender:
Security Errata for Scientific Linux <[log in to unmask]>
From:
Pat Riehecky <[log in to unmask]>
Parts/Attachments:
text/plain (38 lines) 
Synopsis:          Important: firefox security update
Advisory ID:       SLSA-2021:0290-1
Issue Date:        2021-01-27
CVE Numbers:       CVE-2021-23953
                   CVE-2021-23954
                   CVE-2020-26976
                   CVE-2021-23960
                   CVE-2021-23964
--

This update upgrades Firefox to version 78.7.0 ESR.

Security Fix(es):

* Mozilla: Cross-origin information leakage via redirected PDF requests
(CVE-2021-23953)

* Mozilla: Type confusion when using logical assignment operators in
JavaScript switch statements (CVE-2021-23954)

* Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
(CVE-2021-23964)

* Mozilla: HTTPS pages could have been intercepted by a registered service
worker when they should not have been (CVE-2020-26976)

* Mozilla: Use-after-poison for incorrectly redeclared JavaScript
variables during GC (CVE-2021-23960)
--

SL7
  x86_64
    firefox-78.7.0-2.el7_9.x86_64.rpm
    firefox-debuginfo-78.7.0-2.el7_9.x86_64.rpm
    firefox-78.7.0-2.el7_9.i686.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2