Summary
USN-4216-1 fixed vulnerabilities in Firefox. This update provides the
corresponding update for Ubuntu 16.04 LTS.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, or execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 71.0+build5-0ubuntu0.16.04.1 |
Vulnerabilities 9
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial o…
-
Unscored —
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was poss…
-
Unscored —
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially explo…
-
Unscored —
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race c…
-
Unscored —
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could c…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed ev…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corr…
-
Unscored —
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-…
References
-
report
https://ubuntu.com/security/CVE-2019-11745
-
report
https://ubuntu.com/security/CVE-2019-11756
-
report
https://ubuntu.com/security/CVE-2019-17005
-
report
https://ubuntu.com/security/CVE-2019-17008
-
report
https://ubuntu.com/security/CVE-2019-17010
-
report
https://ubuntu.com/security/CVE-2019-17011
-
report
https://ubuntu.com/security/CVE-2019-17012
-
report
https://ubuntu.com/security/CVE-2019-17013
-
report
https://ubuntu.com/security/CVE-2019-17014