Linux · Security advisory · August 16, 2021
RHSA-2021:3157: firefox security update
RHSA-2021:3157, released August 16, 2021, fixes 6 CVEs in firefox (version 0:78.13.0-2.el8_4). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0145
73rd percentile
Priority of the 6 CVEs
Patch now 0
Urgent 0
High 6
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| firefox | RHEL 8 | 0:78.13.0-2.el8_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-29985 | Firefox ESR and 3 others: A use-after-free vulnerability in media channels could have led to memory corruption and a potentially… | 8.8 | 0.0145 | None reported | |
| High | CVE-2021-29980 | Firefox ESR and 3 others: Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption… | 8.8 | 0.0140 | None reported | |
| High | CVE-2021-29984 | Firefox ESR and 3 others: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly… | 8.8 | 0.0139 | None reported | |
| High | CVE-2021-29988 | Firefox ESR and 3 others: Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds… | 8.8 | 0.0138 | None reported | |
| High | CVE-2021-29989 | Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. | 8.8 | 0.0127 | None reported | |
| High | CVE-2021-29986 | firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... | 8.1 | 0.0126 | None reported |
Showing 1 to 6 of 6
1