Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Ubuntu 20.04 LTS: USN-7191-1 critical: Firefox denial of service

ubuntu
Calendar Grey January 9, 2025
Dist Ubuntu Esm H88
Several vulnerabilities resolved in Firefox through updates for Ubuntu 20.04 LTS tackling critical security threats.
Several security issues were fixed in Firefox.

Summary

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked into opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, obtain sensitive

information across domains, or execute arbitrary code. (CVE-2025-0237,

CVE-2025-0239, CVE-2025-0240, CVE-2025-0242, CVE-2025-0243, CVE-2025-0247)

Irvan Kurniawan discovered that Firefox incorrectly handled memory when

breaking lines in text, leading to a use-after-free vulnerability. An

attacker could possibly use this issue to cause a denial of service or

possibly execute arbitrary code. (CVE-2025-0238)

Nils Bars discovered that Firefox incorrectly handled memory when using

JavaScript Text Segmentation. An attacker could possibly use this issue to

cause a denial of service. (CVE-2025-0241)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   firefox                         134.0+build1-0ubuntu0.20.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

  https://ubuntu.com/security/notices/USN-7191-1

  CVE-2025-0237, CVE-2025-0238, CVE-2025-0239, CVE-2025-0240,

  CVE-2025-0241, CVE-2025-0242, CVE-2025-0243, CVE-2025-0247

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7191-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here