TI-2021-12475 CVE-2021-32810 · GHSA-pqqp-xmhj-wgcw
Data race in crossbeam-deque
Priority MEDIUM 46
crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust.
RHSA-2021:3791
firefox security update
Released 2021-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-91.2.0-4.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-91.2.0-4.el7_9
- Red Hat Enterprise Linux Server (v. 7) firefox-91.2.0-4.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-91.2.0-4.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) firefox-91.2.0-4.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-91.2.0-4.el7_9
Fixes 6 records
TI-2021-16100 CVE-2021-38500 · GHSA-pv72-mgh4-jqvg
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
TI-2021-16096 CVE-2021-38496 · GHSA-3rfx-pjp7-cvfp
Use after free in Mozilla Thunderbird
Priority MEDIUM 41
During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash.
TI-2021-16101 CVE-2021-38501 · GHSA-jm85-6c37-hfcj
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
Priority MEDIUM 40
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
TI-2021-16098 CVE-2021-38498 · GHSA-f7wc-pcqv-5mwm
Use after free in Mozilla Firefox
Priority LOW 36
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash.
TI-2021-16097 CVE-2021-38497 · GHSA-qmc5-2jh2-rpcw
Origin validation error in Mozilla Firefox
Priority LOW 30
Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks.