Bug 778263 (CVE-2021-23981, CVE-2021-23982, CVE-2021-23984, CVE-2021-23987, MOZ-2021-0002)

Summary:	[Tracker] Multiple vulnerabilities in Mozilla products (CVE-2021-{23981,23982,23984,23987})
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://www.mozilla.org/en-US/security/advisories/
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	778269, 778272
Bug Blocks:

Description John Helmert III archtester

2021-03-25 21:41:35 UTC

Multiple vulnerabilities fixed in Firefox 87, ESR 78.9, and Thunderbird 78.9, the worst of which is CVE-2021-23987 (reused for Thunderbird):

Mozilla developers and community members Matthew Gregan, Tyson Smith, Julien Wajsberg, and Alexis Beingessner reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

And CVE-2021-23988 for Firefox 87:

Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Comment 1 John Helmert III archtester

2021-05-13 13:32:45 UTC

Dead tracker, closing.