==========================================================================
Ubuntu Security Notice USN-4216-1
December 09, 2019
firefox vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 19.10
– Ubuntu 19.04
– Ubuntu 18.04 LTS
Summary:
Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Software Description:
– firefox: Mozilla Open Source web browser
Details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, or execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.10:
firefox 71.0+build5-0ubuntu0.19.10.1
Ubuntu 19.04:
firefox 71.0+build5-0ubuntu0.19.04.1
Ubuntu 18.04 LTS:
firefox 71.0+build5-0ubuntu0.18.04.1
After a standard system update you need to restart Firefox to make
all the necessary changes.
References:
https://usn.ubuntu.com/4216-1
CVE-2019-11745, CVE-2019-11756, CVE-2019-17005, CVE-2019-17008,
CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17013,
CVE-2019-17014
Package Information:
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.19.10.1
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.18.04.1
—–BEGIN PGP SIGNATURE—–
iQEzBAEBCgAdFiEERN//5MGgCOgyKeIFYR+97NWUbg8FAl3u3hYACgkQYR+97NWU
bg++TggAhpijsr9L/df6HOkM5F7rLVieaMcCdlfnInfjGA7BuYHKJFWEMIBIHips
KlMcCrVp9sfkbZAVH2ZxmMD6RKE61CBCdvTp0tV99fAejXI0ICrgYnA+PWCS5EcT
b/yphS3miNheEE77LXsYVKIIpIIZA2dWFrFLDItDYCEBmk/it9a4CbXqVbssruZ7
LNKMZ5vXHVTXTqLJAcDb8llz766o6SG43yL8Ct2auuSpksW1l/HlboR9PrD/ZubL
nI+zxRhoGN4E8960jHJ2Ocf5oOFw/8sBSN1U3JEw+RqJCXK81aWOv3f6l/8Yn225
tOOl+BF1zeWpGQrLAz9KW7JDDMSxZw==
=pSHM
—–END PGP SIGNATURE—–
—
