==========================================================================
Ubuntu Security Notice USN-4216-1
December 09, 2019

firefox vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.10
– Ubuntu 19.04
– Ubuntu 18.04 LTS

Summary:

Firefox could be made to crash or run programs as your login if it
opened a malicious website.

Software Description:
– firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
firefox 71.0+build5-0ubuntu0.19.10.1

Ubuntu 19.04:
firefox 71.0+build5-0ubuntu0.19.04.1

Ubuntu 18.04 LTS:
firefox 71.0+build5-0ubuntu0.18.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References:
https://usn.ubuntu.com/4216-1
CVE-2019-11745, CVE-2019-11756, CVE-2019-17005, CVE-2019-17008,
CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17013,
CVE-2019-17014

Package Information:
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.19.10.1
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/firefox/71.0+build5-0ubuntu0.18.04.1

—–BEGIN PGP SIGNATURE—–

iQEzBAEBCgAdFiEERN//5MGgCOgyKeIFYR+97NWUbg8FAl3u3hYACgkQYR+97NWU
bg++TggAhpijsr9L/df6HOkM5F7rLVieaMcCdlfnInfjGA7BuYHKJFWEMIBIHips
KlMcCrVp9sfkbZAVH2ZxmMD6RKE61CBCdvTp0tV99fAejXI0ICrgYnA+PWCS5EcT
b/yphS3miNheEE77LXsYVKIIpIIZA2dWFrFLDItDYCEBmk/it9a4CbXqVbssruZ7
LNKMZ5vXHVTXTqLJAcDb8llz766o6SG43yL8Ct2auuSpksW1l/HlboR9PrD/ZubL
nI+zxRhoGN4E8960jHJ2Ocf5oOFw/8sBSN1U3JEw+RqJCXK81aWOv3f6l/8Yn225
tOOl+BF1zeWpGQrLAz9KW7JDDMSxZw==
=pSHM
—–END PGP SIGNATURE—–
—