[USN-4637-2] Firefox vulnerabilities
chris.coulson at canonical.com
Thu Nov 19 22:12:20 UTC 2020
Ubuntu Security Notice USN-4637-2
November 19, 2020
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Firefox could be made to crash or run programs as your login if it
opened a malicious website.
- firefox: Mozilla Open Source web browser
USN-4637-1 fixed vulnerabilities in Firefox. This update provides the
corresponding updates for Ubuntu 16.04 LTS.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across origins, bypass security restrictions, conduct phishing
attacks, conduct cross-site scripting (XSS) attacks, bypass Content
Security Policy (CSP) restrictions, conduct DNS rebinding attacks, or
execute arbitrary code.
The problem can be corrected by updating your system to the following
Ubuntu 16.04 LTS:
After a standard system update you need to restart Firefox to make
all the necessary changes.
CVE-2020-16012, CVE-2020-26951, CVE-2020-26952, CVE-2020-26953,
CVE-2020-26956, CVE-2020-26958, CVE-2020-26959, CVE-2020-26960,
CVE-2020-26961, CVE-2020-26962, CVE-2020-26963, CVE-2020-26965,
CVE-2020-26967, CVE-2020-26968, CVE-2020-26969
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 488 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce