A firefox security update has been released for Arch Linux.

Arch Linux Security Advisory ASA-202011-1
=========================================

Severity: Critical
Date : 2020-11-02
CVE-ID : CVE-2020-15254 CVE-2020-15680 CVE-2020-15681 CVE-2020-15682
CVE-2020-15683 CVE-2020-15684 CVE-2020-15969
Package : firefox
Type : multiple issues
Remote : Yes
Link :   https://security.archlinux.org/AVG-1256

Summary
=======

The package firefox before version 82.0-1 is vulnerable to multiple
issues including arbitrary code execution, information disclosure and
content spoofing.

Resolution
==========

Upgrade to 82.0-1.

# pacman -Syu "firefox>=82.0-1"

The problems have been fixed upstream in version 82.0.

Workaround
==========

None.

Description
===========

- CVE-2020-15254 (arbitrary code execution)

An undefined behaviour leading to memory corruption issues has been
found in the crossbeam rust crate