USN-6966-2: Firefox regressions
USN-6966-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-7518, CVE-2024-7521, CVE-2024-7524, CVE-2024-7526, CVE-2024-7527, CVE-2024-7528, CVE-2024-7529, CVE-2024-7530, CVE-2024-7531) It was discovered that Firefox did not properly manage certain memory operations when processing graphics shared memory. An attacker could potentially exploit this issue to escape the sandbox. (CVE-2024-7519) Nan Wang discovered that Firefox did not properly handle type check in WebAssembly. An attacker could potentially exploit this issue to execute arbitrary code. (CVE-2024-7520) Irvan Kurniawan discovered that Firefox did not properly check an attribute value in the editor component, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2024-7522) Rob Wu discovered that Firefox did not properly check permissions when creating a StreamFilter. An attacker could possibly use this issue to modify response body of requests on any site using a web extension. (CVE-2024-7525)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6966-2?
USN-6966-2 addresses the minor regressions introduced in USN-6966-1, which previously fixed multiple security vulnerabilities in Firefox.
How do I fix USN-6966-2?
To resolve issues related to USN-6966-2, users should update their Firefox installation to version 129.0.2+build1-0ubuntu0.20.04.1 or later on Ubuntu 20.04.
What vulnerabilities were fixed in USN-6966-2?
USN-6966-2 resolves minor regressions linked to multiple security issues that were previously addressed in Firefox with USN-6966-1.
Which versions of Ubuntu are affected by USN-6966-2?
USN-6966-2 specifically affects Ubuntu 20.04 users running the Firefox package version 129.0.2+build1-0ubuntu0.20.04.1.
Is it safe to use Firefox after applying the update for USN-6966-2?
Yes, after applying the update for USN-6966-2, it is safe to use Firefox as the update addresses the prior vulnerabilities and regressions.