[USN-6779-2] Firefox regressions

[Nishit Majithia]

==========================================================================
Ubuntu Security Notice USN-6779-2
May 29, 2024

firefox regressions
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

USN-6779-1 caused some minor regressions in Firefox.

Software Description:
- firefox: Mozilla Open Source web browser

Details:

USN-6779-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.

Original advisory details:

 Multiple security issues were discovered in Firefox. If a user were
 tricked into opening a specially crafted website, an attacker could
 potentially exploit these to cause a denial of service, obtain sensitive
 information across domains, or execute arbitrary code. (CVE-2024-4767,
 CVE-2024-4768, CVE-2024-4769, CVE-2024-4771, CVE-2024-4772, CVE-2024-4773,
 CVE-2024-4774, CVE-2024-4775, CVE-2024-4776, CVE-2024-4777, CVE-2024-4778)
 
 Jan-Ivar Bruaroey discovered that Firefox did not properly manage memory
 when audio input connected with multiple consumers. An attacker could
 potentially exploit this issue to cause a denial of service, or execute
 arbitrary code. (CVE-2024-4764)
 
 Thomas Rinsma discovered that Firefox did not properly handle type check
 when handling fonts in PDF.js. An attacker could potentially exploit this
 issue to execute arbitrary javascript code in PDF.js. (CVE-2024-4367)
 
 Irvan Kurniawan discovered that Firefox did not properly handle certain
 font styles when saving a page to PDF. An attacker could potentially
 exploit this issue to cause a denial of service. (CVE-2024-4770)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  firefox                         126.0.1+build1-0ubuntu0.20.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.

References:
  https://ubuntu.com/security/notices/USN-6779-2
  https://ubuntu.com/security/notices/USN-6779-1
  https://launchpad.net/bugs/2067445

Package Information:
  https://launchpad.net/ubuntu/+source/firefox/126.0.1+build1-0ubuntu0.20.04.1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20240529/70a6ad37/attachment.sig>