drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in firefox
Name: |
Mehrere Probleme in firefox |
|
ID: |
RHSA-2021:0659-01 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat Enterprise Linux |
|
Datum: |
Mi, 24. Februar 2021, 22:59 |
|
Referenzen: |
https://access.redhat.com/security/cve/CVE-2021-23969
https://access.redhat.com/security/cve/CVE-2021-23978
https://access.redhat.com/security/cve/CVE-2021-23973
https://access.redhat.com/security/cve/CVE-2021-23968 |
|
Applikationen: |
Mozilla Firefox |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
===================================================================== Red Hat Security Advisory
Synopsis: Critical: firefox security update Advisory ID: RHSA-2021:0659-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0659 Issue date: 2021-02-24 CVE Names: CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978 =====================================================================
1. Summary:
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AppStream EUS (v. 8.1) - aarch64, ppc64le, s390x, x86_64
3. Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 78.8.0 ESR.
Security Fix(es):
* Mozilla: Content Security Policy violation report could have contained the destination of a redirect (CVE-2021-23968)
* Mozilla: Content Security Policy violation report could have contained the destination of a redirect (CVE-2021-23969)
* Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978)
* Mozilla: MediaError message property could have leaked information about cross-origin resources (CVE-2021-23973)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
4. Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, Firefox must be restarted for the changes to take effect.
5. Bugs fixed (https://bugzilla.redhat.com/):
1932109 - CVE-2021-23969 Mozilla: Content Security Policy violation report could have contained the destination of a redirect 1932110 - CVE-2021-23968 Mozilla: Content Security Policy violation report could have contained the destination of a redirect 1932111 - CVE-2021-23973 Mozilla: MediaError message property could have leaked information about cross-origin resources 1932112 - CVE-2021-23978 Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
6. Package List:
Red Hat Enterprise Linux AppStream EUS (v. 8.1):
Source: firefox-78.8.0-1.el8_1.src.rpm
aarch64: firefox-78.8.0-1.el8_1.aarch64.rpm firefox-debuginfo-78.8.0-1.el8_1.aarch64.rpm firefox-debugsource-78.8.0-1.el8_1.aarch64.rpm
ppc64le: firefox-78.8.0-1.el8_1.ppc64le.rpm firefox-debuginfo-78.8.0-1.el8_1.ppc64le.rpm firefox-debugsource-78.8.0-1.el8_1.ppc64le.rpm
s390x: firefox-78.8.0-1.el8_1.s390x.rpm firefox-debuginfo-78.8.0-1.el8_1.s390x.rpm firefox-debugsource-78.8.0-1.el8_1.s390x.rpm
x86_64: firefox-78.8.0-1.el8_1.x86_64.rpm firefox-debuginfo-78.8.0-1.el8_1.x86_64.rpm firefox-debugsource-78.8.0-1.el8_1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2021-23968 https://access.redhat.com/security/cve/CVE-2021-23969 https://access.redhat.com/security/cve/CVE-2021-23973 https://access.redhat.com/security/cve/CVE-2021-23978 https://access.redhat.com/security/updates/classification/#critical
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBYDZyFdzjgjWX9erEAQiQjBAAp13TU6pL+1Ko/ly9wbsul4FvxR/bs2UY FGmTJ6nL03l32PJX0pkDFx7bUHiYwUzbYMLBEvbN2V5yHk5i2Q1qZLfsVqYeLyaZ fqlR++psFJP/sp73WxdDBCyflIE2IqshT7Y7sS9ovHUNZB+9nOphetlcI7Y82DYR BFOI8p1x7Q796p1TqjzIoSLs0XzDSGDTqvtsOXE24vreYT47/7jbVCj9/J+324c8 OyRYVc25DkClngkGglXURSHRhLS1XylVmLIIfk88uQJX/GcMNZlH1oe+7KdguLNn gGiXVmPeexEsrEuulNqc8JbzInH4Pp9yaUuSCL8nEjZukvGaMqQ5ojBShC8IvBHB 4Nzl1p5liE7mNVuhLcODVvJSnUYKD2eCDHra5Uubh1cimKfqemFcTlUub1EEYv29 zV724h7VdT6K8edR3nQoHhb05Mq9d61Io39pzqriDlErXn64L5nEXmDxVjwNw5WG ykUBh5sohtyaKC0f0lPMjnQFJpxKOu+yYizC/LQ1B3vy08JG4MyztCAM94xWd16b eXPodZV2W/guhJUtok/KTSIH2gml3gPhqPsTtYi5P3Grm6w0mLsal7nzpP/6c3aP k76PrOToQgPpLpdmzjK/U2erNPo23mTXmbjbIX/pApz2l09O1u3aXK5u7/97KD3v ty1F4QAWSQY= =7hfX -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce
|
|
|
|