USN-3896-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same origin protections, or execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/firefoxto a version that resolves this vulnerability.Fixed in 65.0.1+build2-0ubuntu0.18.10.1 - Upgrade
Upgrade
ubuntu/firefoxto a version that resolves this vulnerability.Fixed in 65.0.1+build2-0ubuntu0.18.04.1 - Upgrade
Upgrade
ubuntu/firefoxto a version that resolves this vulnerability.Fixed in 65.0.1+build2-0ubuntu0.16.04.1 - Upgrade
Upgrade
ubuntu/firefoxto a version that resolves this vulnerability.Fixed in 65.0.1+build2-0ubuntu0.14.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What are the vulnerabilities addressed by USN-3896-1?
The vulnerabilities addressed by USN-3896-1 include denial of service, bypass of same-origin protections, and execution of arbitrary code.
How can these vulnerabilities be exploited?
These vulnerabilities can be exploited if a user is tricked into opening a specially crafted website.
Which versions of Firefox are affected by these vulnerabilities?
The versions of Firefox affected by these vulnerabilities are 65.0.1+build2-0ubuntu0.18.10.1, 65.0.1+build2-0ubuntu0.18.04.1, 65.0.1+build2-0ubuntu0.16.04.1, and 65.0.1+build2-0ubuntu0.14.04.1.
How can I fix the vulnerabilities in Firefox?
To fix the vulnerabilities in Firefox, you need to update to version 65.0.1+build2-0ubuntu0.18.10.1 if you are on Ubuntu 18.10, version 65.0.1+build2-0ubuntu0.18.04.1 if you are on Ubuntu 18.04, version 65.0.1+build2-0ubuntu0.16.04.1 if you are on Ubuntu 16.04, or version 65.0.1+build2-0ubuntu0.14.04.1 if you are on Ubuntu 14.04.
Where can I find more information about USN-3896-1?
You can find more information about USN-3896-1 at the following references: [CVE-2018-18356](https://ubuntu.com/security/CVE-2018-18356), [CVE-2018-18511](https://ubuntu.com/security/CVE-2018-18511), [CVE-2019-5785](https://ubuntu.com/security/CVE-2019-5785).