Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Ubuntu 19.10/18.04: 4278-1 Critical Firefox Crash Threat

ubuntu
Calendar Grey February 13, 2020
Dist Ubuntu Esm H88
Multiple security flaws identified in Firefox could lead to crashes or unauthorized code execution via malicious websites. Ubuntu users are recommended to apply the update.
Firefox could be made to crash or run programs as your login if it opened a malicious website.

Summary

Firefox could be made to crash or run programs as your login if it

opened a malicious website.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were tricked

in to opening a specially crafted website, an attacker could potentially

exploit these to cause a denial of service, conduct cross-site scripting

(XSS) attacks, or execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service XSS firefox ubuntu malicious website crashing

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  firefox                         73.0+build3-0ubuntu0.19.10.1

Ubuntu 18.04 LTS:
  firefox                         73.0+build3-0ubuntu0.18.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4278-1

CVE-2020-6796, CVE-2020-6798, CVE-2020-6800, CVE-2020-6801

Severity
critical
Lowest
Low
Medium
High
Critical

February 13, 2020

Topics%20covered

Topics Covered

security advisory denial of service XSS firefox ubuntu malicious website crashing

Package Information

https://launchpad.net/ubuntu/+source/firefox/73.0+build3-0ubuntu0.19.10.1
https://launchpad.net/ubuntu/+source/firefox/73.0+build3-0ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here