TI-2021-06299 CVE-2021-23978 · GHSA-3rjx-v36w-2rw5
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
RHSA-2021:0656
firefox security update
Released 2021-02-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-78.8.0-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-78.8.0-1.el7_9
- Red Hat Enterprise Linux Server (v. 7) firefox-78.8.0-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-78.8.0-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) firefox-78.8.0-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-78.8.0-1.el7_9
Fixes 4 records
TI-2021-06294 CVE-2021-23973 · GHSA-jw3c-jgq3-cf92
Information disclosure through error messages in Mozilla Firefox
Priority LOW 32
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.
TI-2021-06289 CVE-2021-23968 · GHSA-94jc-v9rf-w32j
Information disclosure through error messages in Mozilla Firefox
Priority LOW 23
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI.
TI-2021-06290 CVE-2021-23969 · GHSA-hrpc-c9c2-pj6w
As specified in the W3C Content Security Policy draft, when creating a violation report…
Priority LOW 22
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects.