CVE-2021-29986 Firefox Vunerable on linux

Forum › Forums › General › Software › CVE-2021-29986 Firefox Vunerable on linux

  • This topic has 4 replies, 3 voices, and was last updated Aug 13-7:23 am by Xecure.
Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • August 10, 2021 at 5:40 pm #64672
    Member
    ModdIt

      Until new versions are available both LTS and Firefox 90 are subject to a vunerability which is present on linux systems.

      August 10, 2021 at 6:16 pm #64673
      Moderator
      Brian Masinick
        Helpful
        Up
        0
        ::

        Firefox 91.0 is now available, at least from Firefox. They also have the current release (91.0), Firefox ESR (Extended Support Release), Firefox Beta and Firefox Nightly, plus a few developer-based editions. Distributions are usually anywhere from a few hours to a few days, or even weeks, in offering updates; they are always available directly from Mozilla, for those who take the time and effort to find them.

        --
        Brian Masinick

        August 11, 2021 at 11:18 am #64720
        Member
        ModdIt
          Helpful
          Up
          0
          ::

          I am well aware that the fastest way to get updates is to download from mozilla.

          The vast majority of users including many of those I support will expect updates to come from antiX and not even know that the directly downloaded fox
          will run without installation. That is somewhat more advanced knowledge.

          My post was and is to inform forum users that there is an exploit path on fox for linux which is being actively targeted at present time.

          Message is until FF is updated it may be good to use a different browser. At a minimum use no script wherever possible, problem is many sites
          are broken by blocking scripts.

          • This reply was modified 1 year, 8 months ago by ModdIt.
          August 13, 2021 at 7:16 am #64817
          Member
          ModdIt
            Helpful
            Up
            0
            ::

            For those wishing to have up to date firefox quickest way is always download from mozilla in the language of choice.
            Unpack, using your file manager of choice started with sudo copy the unpacked contents of the newly created firefox folder
            over the old version in opt.

            You can safely remove the hidden extensions in browser features folder and crash reporter, minidump analyser,
            updater, pingsender. Depending on how you have setup you might need to create a new starter.
            On my runit Beta stick I had no issues, fox just worked..

            August 13, 2021 at 7:23 am #64818
            Member
            Xecure
              Helpful
              Up
              0
              ::

              Debian uploaded a newer version of firefox-esr fixing this bug.
              anticapitalista uploaded a new firefox 91 version to the antiX repos fixing this bug.

              End of transmission.

              antiX Live system enthusiast.
              General Live Boot Parameters for antiX.

            • Author
              Posts
            Viewing 5 posts - 1 through 5 (of 5 total)
            • You must be logged in to reply to this topic.