Stay Secure with the Latest Linux Advisories

security advisoryhigh severityarbitrary code execution

Arch Linux: ASA-202105-5 High Severity: Firefox Arbitrary Code Execution

The package firefox before version 88.0.1-1 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-202105-5 ======================================== Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-29952 Package : firefox Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1917 Summary ====== The package firefox before version 88.0.1-1 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 88.0.1-1. # pacman -Syu "firefox> =88.0.1-1" The problem has been fixed upstream in version 88.0.1. Workaround ========= None. Description ========== A security issue has been found in Firefox before version 88.0.1. When Web Render components were destructed, a race condition could have caused undefined behavior, and Mozilla presumes that with enough effort may have been exploitable to run arbitrary code. Impact ===== A remote attacker could execute arbitrary code through a crafted HTML page. References ========= https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/#CVE-2021-29952 https://bugzilla.mozilla.org/show_bug.cgi?id=1704227 https://security.archlinux.org/CVE-2021-29952 . Immediate response required for Arch Linux Security Notice ASA-202105-5 concerning a critical vulnerability in Firefox that allows potential code execution.. Arch Linux Advisories, Firefox Security Alert, Remote Code Exploit. . Severity: Important. LinuxSecurity.com Team

May 20, 2021 •Important ArchLinux