Hello, Firefox was updated in:
https://ubuntu.com/security/notices/USN-4978-1
Thanks
** Information type changed from Private Security to Public Security
** Changed in: firefox (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1930528
Title:
Mozilla Firefox Multiple Vulnerabilities
Status in firefox package in Ubuntu:
Fix Released
Bug description:
CVE Numbers
CVE‑2021‑29961 <https://cve.mitre.org/cgi-
bin/cvename.cgi?name=CVE-2021-29961> , CVE‑2021‑29967
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29967> ,
CVE‑2021‑29966 <https://cve.mitre.org/cgi-
bin/cvename.cgi?name=CVE-2021-29966> , CVE‑2021‑29965
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29965>
Description
Multiple vulnerabilities have been reported in Mozilla Firefox, which
can be exploited by malicious people to conduct spoofing attacks,
bypass certain security restrictions, and compromise a vulnerable
system.
1
Some errors related to memory safety can be exploited to corrupt
memory.
2
Some further errors related to memory safety can be exploited to
corrupt memory.
Successful exploitation of the vulnerabilities #1 and #2 may allow
execution of arbitrary code.
3
An error related to domain spoofing within the built-in password
manager can be exploited to suggest otherwise restricted passwords for
the currently active website.
Note: The vulnerability #3 affects the Android platform only.
4
An error when styling and rendering an oversized "select" element can
be exploited to conduct spoofing attacks.
The vulnerabilities are reported in versions prior to 89.0.
Affected Software
The following software is affected by the described vulnerability.
Please check the vendor links below to see if exactly your version is
affected.
Mozilla Firefox 88.x
Solution
Upgrade to version 89.0
References
1. https://www.mozilla.org/en-US/security/advisories/mfsa2021-23
<https://www.mozilla.org/en-US/security/advisories/mfsa2021-23>
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1930528/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
