==========================================================================
Ubuntu Security Notice USN-3896-1
February 26, 2019
firefox vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 18.10
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
Summary:
Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Software Description:
– firefox: Mozilla Open Source web browser
Details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass same
origin protections, or execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.10:
firefox 65.0.1+build2-0ubuntu0.18.10.1
Ubuntu 18.04 LTS:
firefox 65.0.1+build2-0ubuntu0.18.04.1
Ubuntu 16.04 LTS:
firefox 65.0.1+build2-0ubuntu0.16.04.1
Ubuntu 14.04 LTS:
firefox 65.0.1+build2-0ubuntu0.14.04.1
After a standard system update you need to restart Firefox to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3896-1
CVE-2018-18356, CVE-2018-18511, CVE-2019-5785
Package Information:
https://launchpad.net/ubuntu/+source/firefox/65.0.1+build2-0ubuntu0.18.10.1
https://launchpad.net/ubuntu/+source/firefox/65.0.1+build2-0ubuntu0.18.04.1
https://launchpad.net/ubuntu/+source/firefox/65.0.1+build2-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/firefox/65.0.1+build2-0ubuntu0.14.04.1
—–BEGIN PGP SIGNATURE—–
iQEzBAEBCgAdFiEERN//5MGgCOgyKeIFYR+97NWUbg8FAlx1jtAACgkQYR+97NWU
bg+FGggAqCDep9VgqCFlPqm/+3cIJD5yfkufNSs1BF9GeObMjlbohthxgApe2Xkm
ZDOR/EBhaqqAVSeprC3lkhEJfVmjSmuUngyfp9A/lW3fGZKY9Ffak7HvlL4J23s1
oS4kcx+G9CFBhK6nOArq9HG4Um8ZY6nOkxfe5E4CKE2tVeHbsuqEvB/awAxTUIs3
JhmtX8vhuiJjHinJdFORcFRZsSio1BW1Us/HUNBFIuebmT3NMLhj9Ti8ebKYarDB
2BUTjXttgtEOmyC6Izq8hrkmNp0/l4igyq/SrXxXvVA1E6k3didaqxW+tujpzS5r
+llLnNHf2NSCZGt35IVtvEX51M4dnA==
=8UJG
—–END PGP SIGNATURE—–
—
