OESA-2024-1893

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.(CVE-2021-29984)

Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.(CVE-2021-29988)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP4 / firefox

Package

Name: firefox
Purl: pkg:rpm/openEuler/firefox&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

79.0-28.oe2003sp4

Ecosystem specific

{
    "src": [
        "firefox-79.0-28.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "firefox-79.0-28.oe2003sp4.x86_64.rpm",
        "firefox-debuginfo-79.0-28.oe2003sp4.x86_64.rpm",
        "firefox-debugsource-79.0-28.oe2003sp4.x86_64.rpm",
        "mozilla-crashreporter-firefox-debuginfo-79.0-28.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "firefox-79.0-28.oe2003sp4.aarch64.rpm",
        "firefox-debuginfo-79.0-28.oe2003sp4.aarch64.rpm",
        "firefox-debugsource-79.0-28.oe2003sp4.aarch64.rpm"
    ]
}