Arch Linux Security Advisory ASA-202001-1
========================================
Severity: Critical
Date    : 2020-01-08
CVE-ID  : CVE-2019-17016 CVE-2019-17017 CVE-2019-17020 CVE-2019-17022
          CVE-2019-17023 CVE-2019-17024 CVE-2019-17025
Package : firefox
Type    : multiple issues
Remote  : Yes
Link    : https://security.archlinux.org/AVG-1084

Summary
======
The package firefox before version 72.0-1 is vulnerable to multiple
issues including arbitrary code execution, insufficient validation,
access restriction bypass and denial of service.

Resolution
=========
Upgrade to 72.0-1.

# pacman -Syu "firefox>=72.0-1"

The problems have been fixed upstream in version 72.0.

Workaround
=========
None.

Description
==========
- CVE-2019-17016 (insufficient validation)

A security issue has been found in Firefox before 72.0. When pasting a

ArchLinux: 202001-1: firefox: multiple issues

January 8, 2020

Summary

- CVE-2019-17016 (insufficient validation) A security issue has been found in Firefox before 72.0. When pasting a

Resolution

Upgrade to 72.0-1. # pacman -Syu "firefox>=72.0-1"
The problems have been fixed upstream in version 72.0.

References

https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17016 https://bugzilla.mozilla.org/show_bug.cgi?id=1599181 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17017 https://bugzilla.mozilla.org/show_bug.cgi?id=1603055 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17020 https://bugzilla.mozilla.org/show_bug.cgi?id=1597645 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17022 https://bugzilla.mozilla.org/show_bug.cgi?id=1602843 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17023 https://bugzilla.mozilla.org/show_bug.cgi?id=1590001 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17024 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1507180%2C1595470%2C1598605%2C1601826 https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17025 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1328295%2C1328300%2C1590447%2C1590965%2C1595692%2C1597321%2C1597481 https://security.archlinux.org/CVE-2019-17016 https://security.archlinux.org/CVE-2019-17017 https://security.archlinux.org/CVE-2019-17020 https://security.archlinux.org/CVE-2019-17022 https://security.archlinux.org/CVE-2019-17023 https://security.archlinux.org/CVE-2019-17024 https://security.archlinux.org/CVE-2019-17025