Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Ubuntu 14.04 LTS USN-3918-2 Critical: Firefox Denial Of Service Threat

ubuntu
Calendar Grey March 25, 2019
Dist Ubuntu Esm H88
Urgent security vulnerabilities in Chrome for Ubuntu 16.04 necessitate prompt patches to avert threats and safeguard user data.
Several security issues were fixed in Firefox.

Summary

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-3918-1 fixed vulnerabilities in Firefox. This update provides the

corresponding updates for Ubuntu 14.04 LTS.

Original advisory details:

 Multiple security issues were discovered in Firefox. If a user were

 tricked in to opening a specially crafted website, an attacker could

 potentially exploit these to cause a denial of service via application

 crash, denial of service via successive FTP authorization prompts or modal

 alerts, trick the user with confusing permission request prompts, obtain

 sensitive information, conduct social engineering attacks, or execute

 arbitrary code. (CVE-2019-9788, CVE-2019-9789, CVE-2019-9790,

 CVE-2019-9791, CVE-2019-9792, CVE-2019-9795, CVE-2019-9796, CVE-2019-9797,

 CVE-2019-9799, CVE-2019-9802, CVE-2019-9805, CVE-2019-9806, CVE-2019-9807,

 CVE-2019-9808, CVE-2019-9809)

 

 A mechanism ...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  firefox                         66.0.1+build1-0ubuntu0.14.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3918-2

  https://ubuntu.com/security/notices/USN-3918-1

  CVE-2019-9788, CVE-2019-9789, CVE-2019-9790, CVE-2019-9791,

  CVE-2019-9792, CVE-2019-9793, CVE-2019-9795, CVE-2019-9796,

  CVE-2019-9797, CVE-2019-9799, CVE-2019-9802, CVE-2019-9803,

  CVE-2019-9805, CVE-2019-9806, CVE-2019-9807, CVE-2019-9808,

  CVE-2019-9809

Severity
critical
Lowest
Low
Medium
High
Critical

March 25, 2019

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here