Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 20.04 & 18.04 USN-6010-1 Critical: Firefox Multiple Threats

ubuntu
Calendar Grey April 12, 2023
Scroller Ubuntu
Several security flaws in Firefox disclosed for Ubuntu 20.04 and 18.04 LTS, prompting users to upgrade without delay.
Several security issues were fixed in Firefox.

Summary

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked into opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, obtain sensitive

information across domains, or execute arbitrary code. (CVE-2023-29537,

CVE-2023-29540, CVE-2023-29543, CVE-2023-29544, CVE-2023-29547,

CVE-2023-29548, CVE-2023-29549, CVE-2023-29550, CVE-2023-29551)

Irvan Kurniawan discovered that Firefox did not properly manage fullscreen

notifications using a combination of window.open, fullscreen requests,

window.name assignments, and setInterval calls. An attacker could

potentially exploit this issue to perform spoofing attacks. (CVE-2023-29533)

Lukas Bernhard discovered that Firefox did not properly manage memory

when doing Garbage Collector compaction. An attacker could potentially

exploits this issue to cause a ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution Ubuntu Firefox sensitive information

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  firefox                         112.0+build2-0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  firefox                         112.0+build2-0ubuntu0.18.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-6010-1

CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29537,

CVE-2023-29538, CVE-2023-29539, CVE-2023-29540, CVE-2023-29541,

CVE-2023-29543, CVE-2023-29544, CVE-2023-29547, CVE-2023-29548,

CVE-2023-29549, CVE-2023-29550, CVE-2023-29551

Severity
critical
Lowest
Low
Medium
High
Critical

April 12, 2023

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution Ubuntu Firefox sensitive information

Package Information

https://launchpad.net/ubuntu/+source/firefox/112.0+build2-0ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/firefox/112.0+build2-0ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.