USN-4165-2: Firefox regressions | Ubuntu security notices

Packages

firefox - Mozilla Open Source web browser

Details

USN-4165-1 fixed vulnerabilities in Firefox. The update introduced various
minor regressions. This update fixes the problems.

We apologize for the inconvenience.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass security
restrictions, bypass same-origin restrictions, conduct cross-site
scripting (XSS) attacks, bypass content security policy (CSP) protections,
or execute arbitrary code.

USN-4165-1 fixed vulnerabilities in Firefox. The update introduced various
minor regressions. This update fixes the problems.

We apologize for the inconvenience.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass security
restrictions, bypass same-origin restrictions, conduct cross-site
scripting (XSS) attacks, bypass content security policy (CSP) protections,
or execute arbitrary code.

Update instructions

After a standard system update you need to restart Firefox to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
19.10 eoan	firefox – 70.0.1+build1-0ubuntu0.19.10.1
19.04 disco	firefox – 70.0.1+build1-0ubuntu0.19.04.1
18.04 bionic	firefox – 70.0.1+build1-0ubuntu0.18.04.1
16.04 xenial	firefox – 70.0.1+build1-0ubuntu0.16.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/1851445