Univention Bugzilla – Bug 53657
firefox-esr: Multiple issues (5.0)
Last modified: 2021-08-18 16:35:50 CEST
New Debian firefox-esr 78.13.0esr-1~deb10u1 fixes: This update addresses the following issues: * Uninitialized memory in a canvas object could have led to memory corruption (CVE-2021-29980) * Incorrect instruction reordering during JIT optimization (CVE-2021-29984) * Use-after-free media channels (CVE-2021-29985) * Race condition when resolving DNS names could have led to memory corruption (CVE-2021-29986) * Memory corruption as a result of incorrect style treatment (CVE-2021-29988) * Memory safety bugs fixed in Thunderbird 78.13 (CVE-2021-29989)
--- mirror/ftp/pool/main/f/firefox-esr/firefox-esr_78.12.0esr-1~deb10u1.dsc +++ apt/ucs_5.0-0-errata5.0-0/source/firefox-esr_78.13.0esr-1~deb10u1.dsc @@ -1,3 +1,10 @@ +78.13.0esr-1~deb10u1 [Wed, 11 Aug 2021 07:51:13 +0900] Mike Hommey <glandium@debian.org>: + + * New upstream release. + * Fixes for mfsa2021-34, also known as: + CVE-2021-29986, CVE-2021-29988, CVE-2021-29984, CVE-2021-29980, + CVE-2021-29985, CVE-2021-29989. + 78.12.0esr-1~deb10u1 [Wed, 14 Jul 2021 05:58:36 +0900] Mike Hommey <glandium@debian.org>: * New upstream release. <http://piuparts.knut.univention.de/5.0-0/#1344690103172441359>
OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-0] fd7db6af86 Bug #53657: firefox-esr 78.13.0esr-1~deb10u1 doc/errata/staging/firefox-esr.yaml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x69>