Linux · Security advisory · January 27, 2021
RHSA-2021:0288: firefox security update
RHSA-2021:0288, released January 27, 2021, fixes 5 CVEs in firefox (version 0:78.7.0-2.el8_3). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0164
76th percentile
Priority of the 5 CVEs
Patch now 0
Urgent 0
High 3
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| firefox | RHEL 8 | 0:78.7.0-2.el8_3 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-23964 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. | 8.8 | 0.0136 | None reported | |
| High | CVE-2021-23960 | Firefox ESR and 2 others: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and… | 8.8 | 0.0129 | None reported | |
| High | CVE-2021-23954 | Firefox ESR and 2 others: Using the new logical assignment operators in a JavaScript switch statement could have caused a type… | 8.8 | 0.0119 | None reported | |
| Routine | CVE-2020-26976 | Firefox ESR and 1 other: When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former,… | 6.5 | 0.0164 | None reported | |
| Routine | CVE-2021-23953 | Firefox ESR and 2 others: If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin… | 4.3 | 0.0106 | None reported |
Showing 1 to 5 of 5
1