Explore top 10 tips to secure your open-source projects now. Read More
×
USN-4054-1 caused some minor regressions in Firefox.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
USN-4054-1 fixed vulnerabilities in Firefox. The update introduced
various minor regressions. This update fixes the problems.
We apologize for the inconvenience.
Original advisory details:
A sandbox escape was discovered in Firefox. If a user were tricked in to
installing a malicious language pack, an attacker could exploit this to
gain additional privileges. (CVE-2019-9811)
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, bypass same origin restrictions, conduct cross-site scripting
(XSS) attacks, conduct cross-site request forgery (CSRF) attacks, spoof
origin attributes, spoof the addressbar contents, bypass safebrowsing
protection...
The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: firefox 68.0.1+build1-0ubuntu0.19.04.1 Ubuntu 18.04 LTS: firefox 68.0.1+build1-0ubuntu0.18.04.1 Ubuntu 16.04 LTS: firefox 68.0.1+build1-0ubuntu0.16.04.1 After a standard system update you need to restart Firefox to make all the necessary changes.
https://ubuntu.com/security/notices/USN-4054-2
https://ubuntu.com/security/notices/USN-4054-1
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1837941
Get the latest Linux and open source security news straight to your inbox.