July 2021 - Arch-security - lists.archlinux.org

[ASA-202107-4] opera: arbitrary code execution
by Jonas Witschel 03 Jul '21

03 Jul '21

Arch Linux Security Advisory ASA-202107-4 ========================================= Severity: High Date : 2021-07-01 CVE-ID : CVE-2021-30554 CVE-2021-30555 CVE-2021-30556 CVE-2021-30557 Package : opera Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2083 Summary ======= The package opera before version 77.0.4054.146-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 77.0.4054.146-1. # pacman -Syu "opera>=77.0.4054.146-1" The problems have been fixed upstream in version 77.0.4054.146. Workaround ========== None. Description =========== - CVE-2021-30554 (arbitrary code execution) A use after free security issue has been found in the WebGL component of the Chromium browser engine before version 91.0.4472.114. Google is aware that an exploit for CVE-2021-30554 exists in the wild. - CVE-2021-30555 (arbitrary code execution) A use after free security issue has been found in the Sharing component of the Chromium browser engine before version 91.0.4472.114. - CVE-2021-30556 (arbitrary code execution) A use after free security issue has been found in the WebAudio component of the Chromium browser engine before version 91.0.4472.114. - CVE-2021-30557 (arbitrary code execution) A use after free security issue has been found in the TabGroups component of the Chromium browser engine before version 91.0.4472.114. Impact ====== A remote attacker could execute arbitrary code through a crafted web page. Google is aware that an exploit for one of the security issues exists in the wild. References ========== https://blogs.opera.com/desktop/changelog-for-77/ https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-des… https://crbug.com/1219857 https://crbug.com/1215029 https://crbug.com/1212599 https://crbug.com/1202102 https://security.archlinux.org/CVE-2021-30554 https://security.archlinux.org/CVE-2021-30555 https://security.archlinux.org/CVE-2021-30556 https://security.archlinux.org/CVE-2021-30557

1 0

[ASA-202107-3] istio: information disclosure
by Jonas Witschel 03 Jul '21

03 Jul '21

Arch Linux Security Advisory ASA-202107-3 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-34824 Package : istio Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2113 Summary ======= The package istio before version 1.10.2-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 1.10.2-1. # pacman -Syu "istio>=1.10.2-1" The problem has been fixed upstream in version 1.10.2. Workaround ========== This vulnerability can be mitigated by disabling Istiod caching. Caching is disabled by setting an Istiod environment variable PILOT_ENABLE_XDS_CACHE=false. System and Istiod performance may be impacted as this disables XDS caching. Description =========== Istio before version 1.10.2 contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from different namespaces. The Istio Gateway and DestinationRule can load private keys and certificates from Kubernetes secrets via the credentialName configuration. For Istio 1.8 and above, the secrets are conveyed from Istiod to gateways or workloads via the XDS API. In the above approach, a gateway or workload deployment should only be able to access credentials (TLS certificates and private keys) stored in the Kubernetes secrets within its namespace. However, a bug in Istiod permits an authorized client the ability to access and retrieve any TLS certificate and private key cached in Istiod. Impact ====== An authorized client could retrieve any TLS certificate and private key cached in Istiod outside of its own namespace. References ========== https://istio.io/latest/news/security/istio-security-2021-007/ https://github.com/istio/istio/commit/10674c9a86ece93dcd40efd8e4b9147bc8604… https://github.com/istio/istio/commit/f58f789f8e0d1580d00b68b76b1132163939b… https://security.archlinux.org/CVE-2021-34824

1 0

[ASA-202107-2] electron11: multiple issues
by Jonas Witschel 03 Jul '21

03 Jul '21

Arch Linux Security Advisory ASA-202107-2 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-30544 CVE-2021-30548 CVE-2021-30551 Package : electron11 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2099 Summary ======= The package electron11 before version 11.4.9-1 is vulnerable to multiple issues including arbitrary code execution and incorrect calculation. Resolution ========== Upgrade to 11.4.9-1. # pacman -Syu "electron11>=11.4.9-1" The problems have been fixed upstream in version 11.4.9. Workaround ========== None. Description =========== - CVE-2021-30544 (arbitrary code execution) A use after free security issue has been found in the BFCache component of the Chromium browser before version 91.0.4472.101. - CVE-2021-30548 (arbitrary code execution) A use after free security issue has been found in the Loader component of the Chromium browser before version 91.0.4472.101. - CVE-2021-30551 (incorrect calculation) A type confusion security issue has been found in the V8 component of the Chromium browser before version 91.0.4472.101. Google is aware that an exploit for CVE-2021-30551 exists in the wild. Impact ====== A remote attacker could execute arbitrary code through a crafted web page. Google is aware that an exploit for one of the security issues exists in the wild. References ========== https://www.electronjs.org/releases/stable?version=11#11.4.9 https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-des… https://crbug.com/1212618 https://crbug.com/1210487 https://crbug.com/1216437 https://security.archlinux.org/CVE-2021-30544 https://security.archlinux.org/CVE-2021-30548 https://security.archlinux.org/CVE-2021-30551

1 0

[ASA-202107-1] electron12: arbitrary code execution
by Jonas Witschel 03 Jul '21

03 Jul '21

Arch Linux Security Advisory ASA-202107-1 ========================================= Severity: High Date : 2021-07-01 CVE-ID : CVE-2021-30547 CVE-2021-30553 CVE-2021-30554 Package : electron12 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2112 Summary ======= The package electron12 before version 12.0.13-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 12.0.13-1. # pacman -Syu "electron12>=12.0.13-1" The problems have been fixed upstream in version 12.0.13. Workaround ========== None. Description =========== - CVE-2021-30547 (arbitrary code execution) An out of bounds write security issue has been found in the ANGLE component of the Chromium browser before version 91.0.4472.101. - CVE-2021-30553 (arbitrary code execution) A use after free security issue has been found in the Network service component of the Chromium browser before version 91.0.4472.101. - CVE-2021-30554 (arbitrary code execution) A use after free security issue has been found in the WebGL component of the Chromium browser engine before version 91.0.4472.114. Google is aware that an exploit for CVE-2021-30554 exists in the wild. Impact ====== A remote attacker could execute arbitrary code through a crafted web page. Google is aware that an exploit for one of the security issues exists in the wild. References ========== https://github.com/electron/electron/releases/tag/v12.0.13 https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-des… https://crbug.com/1210414 https://crbug.com/1209769 https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-des… https://crbug.com/1219857 https://security.archlinux.org/CVE-2021-30547 https://security.archlinux.org/CVE-2021-30553 https://security.archlinux.org/CVE-2021-30554

1 0