ArchLinux: 202106-3: firefox: multiple issues
Summary
- CVE-2021-29959 (access restriction bypass)
When a user has already allowed a website to access microphone and
camera, disabling camera sharing would not fully prevent the website
from re-enabling it without an additional prompt. This was only
possible if the website kept recording with the microphone until re-enabling the camera.
- CVE-2021-29960 (information disclosure)
Firefox used to cache the last filename used for printing a file. When
generating a filename for printing, Firefox usually suggests the web
page title. The caching and suggestion techniques combined may have
lead to the title of a website visited during private browsing mode
being stored on disk.
- CVE-2021-29961 (content spoofing)
When styling and rendering an oversized element, Firefox did
not apply correct clipping which allowed an attacker to paint over the
user interface.
- CVE-2021-29966 (arbitrary code execution)
Mozilla developers reported memory safety bugs present in Firefox 88.
Some of these bugs showed evidence of memory corruption and Mozilla
presumes that with enough effort some of these could have been
exploited to run arbitrary code.
- CVE-2021-29967 (arbitrary code execution)
Mozilla developers reported memory safety bugs present in Firefox 88.
Some of these bugs showed evidence of memory corruption and Mozilla
presumes that with enough effort some of these could have been
exploited to run arbitrary code.
Resolution
Upgrade to 89.0-1.
# pacman -Syu "firefox>=89.0-1"
The problems have been fixed upstream in version 89.0.
References
https://www.mozilla.org/en-US/security/advisories/mfsa2021-23/ https://bugzilla.mozilla.org/show_bug.cgi?id=1395819 https://bugzilla.mozilla.org/show_bug.cgi?id=1675965 https://bugzilla.mozilla.org/show_bug.cgi?id=1700235 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1660307%2C1686154%2C1702948%2C1708124 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1602862%2C1703191%2C1703760%2C1704722%2C1706041 https://security.archlinux.org/CVE-2021-29959 https://security.archlinux.org/CVE-2021-29960 https://security.archlinux.org/CVE-2021-29961 https://security.archlinux.org/CVE-2021-29966 https://security.archlinux.org/CVE-2021-29967
Workaround
None.