Linux · Ubuntu · Package update · August 10, 2021

firefox 91.0+build2-0ubuntu0.18.04.1: firefox 91.0+build2-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

firefox 91.0+build2-0ubuntu0.18.04.1, released August 10, 2021, fixes 10 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
10
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0145
73rd percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 8 Routine 2

Fixed package versions

ProductReleaseFixed in
firefoxUbuntu 18.04.6 LTS (bionic)91.0+build2-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-29985 Firefox ESR and 3 others: A use-after-free vulnerability in media channels could have led to memory corruption and a potentially…8.8 0.0145 None reported
High CVE-2021-29980 Firefox ESR and 3 others: Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption…8.8 0.0140 None reported
High CVE-2021-29984 Firefox ESR and 3 others: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly…8.8 0.0139 None reported
High CVE-2021-29988 Firefox ESR and 3 others: Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds…8.8 0.0138 None reported
High CVE-2021-29989 Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.8.8 0.0127 None reported
High CVE-2021-29986 firefox: ELSA-2021-3157: firefox security update (IMPORTANT)8.1 0.0126 None reported
High CVE-2021-29981 Firefox ESR and 3 others: An issue present in lowering/register allocation could have led to obscure but deterministic register…8.8 0.0101 None reported
High CVE-2021-29990 Firefox ESR and 1 other: Mozilla developers and community members reported memory safety bugs present in Firefox 90.8.8 0.0101 None reported
Routine CVE-2021-29982 Firefox ESR and 3 others: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting…6.5 0.0112 None reported
Routine CVE-2021-29987 firefox: After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be d...n/a 0.0095 None reported
Showing 1 to 10 of 10 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.