SCIENTIFIC-LINUX-ERRATA Archives

January 2021

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Important: firefox on SL7.x x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Wed, 27 Jan 2021 21:16:32 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (38 lines) 
Synopsis:          Important: firefox security update
Advisory ID:       SLSA-2021:0290-1
Issue Date:        2021-01-27
CVE Numbers:       CVE-2021-23953
                   CVE-2021-23954
                   CVE-2020-26976
                   CVE-2021-23960
                   CVE-2021-23964
--

This update upgrades Firefox to version 78.7.0 ESR.

Security Fix(es):

* Mozilla: Cross-origin information leakage via redirected PDF requests
(CVE-2021-23953)

* Mozilla: Type confusion when using logical assignment operators in
JavaScript switch statements (CVE-2021-23954)

* Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
(CVE-2021-23964)

* Mozilla: HTTPS pages could have been intercepted by a registered service
worker when they should not have been (CVE-2020-26976)

* Mozilla: Use-after-poison for incorrectly redeclared JavaScript
variables during GC (CVE-2021-23960)
--

SL7
  x86_64
    firefox-78.7.0-2.el7_9.x86_64.rpm
    firefox-debuginfo-78.7.0-2.el7_9.x86_64.rpm
    firefox-78.7.0-2.el7_9.i686.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2