Login
Newsletter
Werbung

Sicherheit: Zwei Probleme in Firefox
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in Firefox
ID: USN-4317-1
Distribution: Ubuntu
Plattformen: Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 19.10
Datum: Sa, 4. April 2020, 19:53
Referenzen: https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.19.10.1
https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.16.04.1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.18.04.1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
Applikationen: Mozilla Firefox

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============1053309848257225111==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="ZwxdMghCpxD8ASSo2mhkiHAYL7pko8sXO"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--ZwxdMghCpxD8ASSo2mhkiHAYL7pko8sXO
Content-Type: multipart/mixed;
boundary="5mHV7vrbgr6EINxDpwxQUKPZ9ALqSdgEv"

--5mHV7vrbgr6EINxDpwxQUKPZ9ALqSdgEv
Content-Type: text/plain; charset=utf-8
Content-Language: en-U
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-4317-1
April 04, 2020

firefox vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Firefox could be made to crash or run programs as your login if it
opened a malicious website.

Software Description:
- firefox: Mozilla Open Source web browser

Details:

Two use-after-free bugs were discovered in Firefox. If a user were tricked
in to opening a specially crafted website, an attacker could exploit these
to cause a denial of service or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
firefox 74.0.1+build1-0ubuntu0.19.10.1

Ubuntu 18.04 LTS:
firefox 74.0.1+build1-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
firefox 74.0.1+build1-0ubuntu0.16.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References:
https://usn.ubuntu.com/4317-1
CVE-2020-6819, CVE-2020-6820

Package Information:

https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.19.10.1

https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.18.04.1

https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.16.04.1


--5mHV7vrbgr6EINxDpwxQUKPZ9ALqSdgEv--

--ZwxdMghCpxD8ASSo2mhkiHAYL7pko8sXO
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEERN//5MGgCOgyKeIFYR+97NWUbg8FAl6IfoEACgkQYR+97NWU
bg/+JQgAp0GWnca6KAW0bOhm1AxqnXJci7MDYKgs1sCOR4J5bDRLIwooAYeSxtdF
n3DgbFEhIQLzq/66X2WQRmeIs6+E/rQeGjFIL4AFaHOK504zbYHUxC8hn8wZIckX
/Y6U9x32lQBG0tG3DUBb9kbDZPxrC0kID4oQG5gsG2mlUfj5lnAw9nEw+rK+dMeO
1bSP6KaYAJg9uGFuleoOuOB9Y7mPP/ESBpHq0AArrKbTJKjsf2surNbqeVZDRttN
+SbGbjSv7Xycky0teZkL+i2eLQ0SABWRRQA5LGtSoTp864+Nb8iVWKkIBsYtknka
77iPbo6wpea3e4pqQSCMQy234bdteg==
=gdYF
-----END PGP SIGNATURE-----

--ZwxdMghCpxD8ASSo2mhkiHAYL7pko8sXO--


--===============1053309848257225111==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============1053309848257225111==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung