MGASA-2021-0354 - Updated firefox packages fix security vulnerabilities

Publication date: 16 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0354.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-29970,
     CVE-2021-29976,
     CVE-2021-30547

A malicious webpage could have triggered a use-after-free in accessibility
features of a document, causing memory corruption and a potentially exploitable
crash when accessibility was enabled (CVE-2021-29970).

Mozilla developers Valentin Gosu, Randell Jesup, Emil Ghitta, Tyson Smith, and
Olli Pettay reported memory safety bugs present in Firefox ESR 78.11. Some of
these bugs showed evidence of memory corruption and we presume that with
enough effort some of these could have been exploited to run arbitrary code
(CVE-2021-29976).

An out of bounds write in ANGLE could have allowed an attacker to corrupt
memory leading to a potentially exploitable crash (CVE-2021-30547).

References:
- https://bugs.mageia.org/show_bug.cgi?id=29247
- https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/M01xJ10PkAc
- - - https://www.mozilla.org/en-US/security/advisories/mfsa2021-29/
- https://access.redhat.com/errata/RHSA-2021:2741
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29970
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29976
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30547

SRPMS:
- 8/core/nspr-4.32-1.mga8
- 8/core/rootcerts-20210525.00-1.1.mga8
- 8/core/nss-3.68.0-1.mga8
- 8/core/firefox-78.12.0-1.mga8
- 8/core/firefox-l10n-78.12.0-1.mga8