Alpine/firefox: medium 4.3
When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox < 89.
Action: Upgrade firefox to 89.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 78.11.0 | 89.0-r0 | - |
Fixed versions
| 89.0-r0 |
Sources
- osv: ALPINE-CVE-2021-29961#Alpine:v3.21/firefox
- https://security.alpinelinux.org/vuln/CVE-2021-29961
published · modified · JSON