Ubuntu 16.10 Moderate: USN-3216-2 Firefox Regression Fix

ubuntu

March 30, 2017

USN-3216-1 introduced a regression in Firefox.

Summary

USN-3216-1 introduced a regression in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a

startup crash when Firefox is used with XRDP. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to bypass same origin restrictions, obtain

sensitive information, spoof the addressbar, spoof the print dialog,

cause a denial of service via application crash or hang, or execute

arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400,

CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, CVE-2017-5404, CVE-2017-5405,

CVE-2017-5406, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410, CVE-2017-5412,

CVE-2017-5413, CVE-2017-5414, CVE-2017-5415, CVE-2017-5416, CVE-2017-54...

Read the Full Advisory

Topics Covered

security advisory moderate firefox update instructions software issue ubuntu regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  firefox                         52.0.2+build1-0ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  firefox                         52.0.2+build1-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  firefox                         52.0.2+build1-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  firefox                         52.0.2+build1-0ubuntu0.12.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.