{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9", "tracking": { "current_release_date": "2026-08-11T14:54:11+00:00", "generator": { "date": "2026-08-11T14:54:11+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-23987", "initial_release_date": "2021-03-23T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:54:11+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.1.0.z", "product": { "name": "Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.1::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.3", "product": { "name": "Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4", "product": { "name": "Red Hat Enterprise Linux 8.4", "product_id": "rhel-8.4.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.5", "product": { "name": "Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.1.0.z", "product": { "name": "Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.1::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.3", "product": { "name": "Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el7_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el7_9?epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el7_9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_1", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_1?epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_2?epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_3?epoch=0" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox-0:78.9.0-1.el8_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox@78.9.0-1.el8_3?arch=src&epoch=0" } } }, { "category": "product_version", "name": "firefox-debuginfo", "product": { "name": "firefox-debuginfo", "product_id": "firefox-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox-debuginfo" } } }, { "category": "product_version", "name": "firefox-debugsource", "product": { "name": "firefox-debugsource", "product_id": "firefox-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox-debugsource" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox?arch=src" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el7_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el7_9?epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el7_9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_1", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_1?epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_2?epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_3?epoch=0" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird-0:78.9.0-3.el8_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird@78.9.0-3.el8_3?arch=src&epoch=0" } } }, { "category": "product_version", "name": "thunderbird-debuginfo", "product": { "name": "thunderbird-debuginfo", "product_id": "thunderbird-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird-debuginfo" } } }, { "category": "product_version", "name": "thunderbird-debugsource", "product": { "name": "thunderbird-debugsource", "product_id": "thunderbird-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird-debugsource" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 8.4", "product_id": "rhel-8.4.0:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "rhel-8.4.0" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9" }, "product_reference": "firefox-0:78.9.0-1.el7_9", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9" }, "product_reference": "firefox-0:78.9.0-1.el7_9", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9" }, "product_reference": "firefox-0:78.9.0-1.el7_9", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9.src" }, "product_reference": "firefox-0:78.9.0-1.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9.src" }, "product_reference": "firefox-0:78.9.0-1.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9.src" }, "product_reference": "firefox-0:78.9.0-1.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_1 as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1" }, "product_reference": "firefox-0:78.9.0-1.el8_1", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_1 as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1" }, "product_reference": "firefox-0:78.9.0-1.el8_1", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_1.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src" }, "product_reference": "firefox-0:78.9.0-1.el8_1.src", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_1.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src" }, "product_reference": "firefox-0:78.9.0-1.el8_1.src", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2" }, "product_reference": "firefox-0:78.9.0-1.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2" }, "product_reference": "firefox-0:78.9.0-1.el8_2", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src" }, "product_reference": "firefox-0:78.9.0-1.el8_2.src", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src" }, "product_reference": "firefox-0:78.9.0-1.el8_2.src", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3 as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3" }, "product_reference": "firefox-0:78.9.0-1.el8_3", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3" }, "product_reference": "firefox-0:78.9.0-1.el8_3", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3 as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3" }, "product_reference": "firefox-0:78.9.0-1.el8_3", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3.src as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src" }, "product_reference": "firefox-0:78.9.0-1.el8_3.src", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3.src" }, "product_reference": "firefox-0:78.9.0-1.el8_3.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-0:78.9.0-1.el8_3.src as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src" }, "product_reference": "firefox-0:78.9.0-1.el8_3.src", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:firefox-debuginfo" }, "product_reference": "firefox-debuginfo", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:firefox-debugsource" }, "product_reference": "firefox-debugsource", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 8.4", "product_id": "rhel-8.4.0:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "rhel-8.4.0" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 8.4", "product_id": "rhel-8.4.0:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "rhel-8.4.0" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9.src" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9.src" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el7_9.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9.src" }, "product_reference": "thunderbird-0:78.9.0-3.el7_9.src", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_1 as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1" }, "product_reference": "thunderbird-0:78.9.0-3.el8_1", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_1 as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1" }, "product_reference": "thunderbird-0:78.9.0-3.el8_1", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_1.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_1.src", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_1.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_1.src", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2" }, "product_reference": "thunderbird-0:78.9.0-3.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2" }, "product_reference": "thunderbird-0:78.9.0-3.el8_2", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_2.src", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_2.src", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3 as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3 as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3.src as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3.src", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:78.9.0-3.el8_3.src as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src" }, "product_reference": "thunderbird-0:78.9.0-3.el8_3.src", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:thunderbird-debuginfo" }, "product_reference": "thunderbird-debuginfo", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-br-8.3.0.z::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-br-8.3.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-br-8.1.0.z.eus::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-br-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.eus::appstream:thunderbird-debugsource" }, "product_reference": "thunderbird-debugsource", "relates_to_product_reference": "rhel-8.1.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.4", "product_id": "rhel-8.4.0:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "rhel-8.4.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-23987", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "discovery_date": "2021-03-23T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-7.9.z::client:firefox-debuginfo", "rhel-7.9.z::client:thunderbird-debuginfo", "rhel-7.9.z::server:firefox-debuginfo", "rhel-7.9.z::server:thunderbird-debuginfo", "rhel-7.9.z::workstation:firefox-debuginfo", "rhel-7.9.z::workstation:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.10.z::appstream:firefox-debuginfo", "rhel-8.10.z::appstream:firefox-debugsource", "rhel-8.10.z::appstream:thunderbird-debuginfo", "rhel-8.10.z::appstream:thunderbird-debugsource", "rhel-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.3.0.z::appstream:firefox-debuginfo", "rhel-8.3.0.z::appstream:firefox-debugsource", "rhel-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-8.3.0.z::appstream:thunderbird-debugsource", "rhel-br-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.3.0.z::appstream:firefox-debuginfo", "rhel-br-8.3.0.z::appstream:firefox-debugsource", "rhel-br-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-br-8.3.0.z::appstream:thunderbird-debugsource" ] } ], "notes": [ { "category": "description", "text": "The Mozilla Foundation Security Advisory describes this issue as:\r\n\r\nMozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9.src", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src" ], "known_affected": [ "rhel-6-els.els:firefox", "rhel-6-els.els:firefox.src", "rhel-6-els.els:thunderbird", "rhel-6-els.els:thunderbird.src", "rhel-8.4.0:firefox", "rhel-8.4.0:firefox.src", "rhel-8.4.0:thunderbird", "rhel-8.4.0:thunderbird.src", "rhel-8.5.0:firefox", "rhel-8.5.0:firefox.src", "rhel-8.5.0:thunderbird", "rhel-8.5.0:thunderbird.src" ], "known_not_affected": [ "rhel-7.9.z::client:firefox-debuginfo", "rhel-7.9.z::client:thunderbird-debuginfo", "rhel-7.9.z::server:firefox-debuginfo", "rhel-7.9.z::server:thunderbird-debuginfo", "rhel-7.9.z::workstation:firefox-debuginfo", "rhel-7.9.z::workstation:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.10.z::appstream:firefox-debuginfo", "rhel-8.10.z::appstream:firefox-debugsource", "rhel-8.10.z::appstream:thunderbird-debuginfo", "rhel-8.10.z::appstream:thunderbird-debugsource", "rhel-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.3.0.z::appstream:firefox-debuginfo", "rhel-8.3.0.z::appstream:firefox-debugsource", "rhel-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-8.3.0.z::appstream:thunderbird-debugsource", "rhel-br-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.3.0.z::appstream:firefox-debuginfo", "rhel-br-8.3.0.z::appstream:firefox-debugsource", "rhel-br-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-br-8.3.0.z::appstream:thunderbird-debugsource" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-23987" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23987" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-23987" } ], "remediations": [ { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:firefox", "rhel-6-els.els:firefox.src", "rhel-6-els.els:thunderbird", "rhel-6-els.els:thunderbird.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.4.0:firefox", "rhel-8.4.0:firefox.src", "rhel-8.4.0:thunderbird", "rhel-8.4.0:thunderbird.src", "rhel-8.5.0:firefox", "rhel-8.5.0:firefox.src", "rhel-8.5.0:thunderbird", "rhel-8.5.0:thunderbird.src" ] }, { "category": "vendor_fix", "date": "2021-03-25T12:24:42+00:00", "details": "Apply advisory RHSA-2021:0990 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0990" }, { "category": "vendor_fix", "date": "2021-03-25T12:56:08+00:00", "details": "Apply advisory RHSA-2021:0989 as per vendors instructions.", "product_ids": [ "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0989" }, { "category": "vendor_fix", "date": "2021-03-25T12:33:29+00:00", "details": "Apply advisory RHSA-2021:0991 as per vendors instructions.", "product_ids": [ "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0991" }, { "category": "vendor_fix", "date": "2021-03-25T13:47:15+00:00", "details": "Apply advisory RHSA-2021:0992 as per vendors instructions.", "product_ids": [ "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0992" }, { "category": "vendor_fix", "date": "2021-03-25T12:53:25+00:00", "details": "Apply advisory RHSA-2021:0993 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0993" }, { "category": "vendor_fix", "date": "2021-03-25T13:01:48+00:00", "details": "Apply advisory RHSA-2021:0994 as per vendors instructions.", "product_ids": [ "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0994" }, { "category": "vendor_fix", "date": "2021-03-25T12:39:27+00:00", "details": "Apply advisory RHSA-2021:0995 as per vendors instructions.", "product_ids": [ "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0995" }, { "category": "vendor_fix", "date": "2021-03-25T13:41:40+00:00", "details": "Apply advisory RHSA-2021:0996 as per vendors instructions.", "product_ids": [ "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9.src" ], "url": "https://access.redhat.com/errata/RHSA-2021:0996" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "rhel-6-els.els:firefox", "rhel-6-els.els:firefox.src", "rhel-6-els.els:thunderbird", "rhel-6-els.els:thunderbird.src", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::client:firefox-debuginfo", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::client:thunderbird-debuginfo", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::server:firefox-debuginfo", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::server:thunderbird-debuginfo", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::workstation:firefox-debuginfo", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::workstation:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.10.z::appstream:firefox-debuginfo", "rhel-8.10.z::appstream:firefox-debugsource", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.10.z::appstream:thunderbird-debuginfo", "rhel-8.10.z::appstream:thunderbird-debugsource", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.3.0.z::appstream:firefox-debuginfo", "rhel-8.3.0.z::appstream:firefox-debugsource", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-8.3.0.z::appstream:thunderbird-debugsource", "rhel-8.4.0:firefox", "rhel-8.4.0:firefox.src", "rhel-8.4.0:thunderbird", "rhel-8.4.0:thunderbird.src", "rhel-8.5.0:firefox", "rhel-8.5.0:firefox.src", "rhel-8.5.0:thunderbird", "rhel-8.5.0:thunderbird.src", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-br-8.3.0.z::appstream:firefox-debuginfo", "rhel-br-8.3.0.z::appstream:firefox-debugsource", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-br-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-br-8.3.0.z::appstream:thunderbird-debugsource" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "rhel-6-els.els:firefox", "rhel-6-els.els:firefox.src", "rhel-6-els.els:thunderbird", "rhel-6-els.els:thunderbird.src", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::client:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::client:firefox-debuginfo", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::client:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::client:thunderbird-debuginfo", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::server:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::server:firefox-debuginfo", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::server:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::server:thunderbird-debuginfo", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9", "rhel-7.9.z::workstation:firefox-0:78.9.0-1.el7_9.src", "rhel-7.9.z::workstation:firefox-debuginfo", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9", "rhel-7.9.z::workstation:thunderbird-0:78.9.0-3.el7_9.src", "rhel-7.9.z::workstation:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.10.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.10.z::appstream:firefox-debuginfo", "rhel-8.10.z::appstream:firefox-debugsource", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.10.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.10.z::appstream:thunderbird-debuginfo", "rhel-8.10.z::appstream:thunderbird-debugsource", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-8.3.0.z::appstream:firefox-debuginfo", "rhel-8.3.0.z::appstream:firefox-debugsource", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-8.3.0.z::appstream:thunderbird-debugsource", "rhel-8.4.0:firefox", "rhel-8.4.0:firefox.src", "rhel-8.4.0:thunderbird", "rhel-8.4.0:thunderbird.src", "rhel-8.5.0:firefox", "rhel-8.5.0:firefox.src", "rhel-8.5.0:thunderbird", "rhel-8.5.0:thunderbird.src", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1", "rhel-br-8.1.0.z.eus::appstream:firefox-0:78.9.0-1.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.1.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1", "rhel-br-8.1.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_1.src", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.1.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2", "rhel-br-8.2.0.z.eus::appstream:firefox-0:78.9.0-1.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:firefox-debuginfo", "rhel-br-8.2.0.z.eus::appstream:firefox-debugsource", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2", "rhel-br-8.2.0.z.eus::appstream:thunderbird-0:78.9.0-3.el8_2.src", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debuginfo", "rhel-br-8.2.0.z.eus::appstream:thunderbird-debugsource", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3", "rhel-br-8.3.0.z::appstream:firefox-0:78.9.0-1.el8_3.src", "rhel-br-8.3.0.z::appstream:firefox-debuginfo", "rhel-br-8.3.0.z::appstream:firefox-debugsource", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3", "rhel-br-8.3.0.z::appstream:thunderbird-0:78.9.0-3.el8_3.src", "rhel-br-8.3.0.z::appstream:thunderbird-debuginfo", "rhel-br-8.3.0.z::appstream:thunderbird-debugsource" ] } ], "title": "Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9" } ] }