Synopsis: Important: firefox security update
Advisory ID: SLSA-2021:0290-1
Issue Date: 2021-01-27
CVE Numbers: CVE-2021-23953
CVE-2021-23954
CVE-2020-26976
CVE-2021-23960
CVE-2021-23964
—
This update upgrades Firefox to version 78.7.0 ESR.
Security Fix(es):
* Mozilla: Cross-origin information leakage via redirected PDF requests
(CVE-2021-23953)
* Mozilla: Type confusion when using logical assignment operators in
JavaScript switch statements (CVE-2021-23954)
* Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
(CVE-2021-23964)
* Mozilla: HTTPS pages could have been intercepted by a registered service
worker when they should not have been (CVE-2020-26976)
* Mozilla: Use-after-poison for incorrectly redeclared JavaScript
variables during GC (CVE-2021-23960)
—
SL7
x86_64
firefox-78.7.0-2.el7_9.x86_64.rpm
firefox-debuginfo-78.7.0-2.el7_9.x86_64.rpm
firefox-78.7.0-2.el7_9.i686.rpm
– Scientific Linux Development Team
