Ubuntu alert USN-7134-1 (firefox)

From:
             
 
Evan Caville <evan.caville@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7134-1] Firefox vulnerabilities
Date:
             
 
Tue, 03 Dec 2024 14:37:15 +1000
Message-ID:
             
 
<93249bb9-730f-482e-8173-f9de3555a29a@canonical.com>
==========================================================================
Ubuntu Security Notice USN-7134-1
December 03, 2024

firefox vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in Firefox.

Software Description:
- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2024-11692,
CVE-2024-11694, CVE-2024-11695, CVE-2024-11696, CVE-2024-11697,
CVE-2024-11699, CVE-2024-11701, CVE-2024-11704, CVE-2024-11705,
CVE-2024-11706, CVE-2024-11708)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   firefox                         133.0+build2-0ubuntu0.20.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes

References:
   https://ubuntu.com/security/notices/USN-7134-1
   CVE-2024-11692, CVE-2024-11694, CVE-2024-11695, CVE-2024-11696,
   CVE-2024-11697, CVE-2024-11699, CVE-2024-11701, CVE-2024-11704,
   CVE-2024-11705, CVE-2024-11706, CVE-2024-11708

Package Information:
https://launchpad.net/ubuntu/+source/firefox/133.0+build2...



Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

wsF5BAABCAAjFiEEAPYWTpwtIbr7xH4OWNrRIKaTkWcFAmdOivsFAwAAAAAACgkQWNrRIKaTkWfb
fA/9H8/pG6aa5F20d1VUXX8hrbSUmoD4chr5LeTylElaPN57F1ppHkPTSfh6JcZ/KNOfkEoyZSRg
Uq8hfT5RGgetn9o1zPBsmQR/veKQclqIfpRRtjGyOv4xG587yqfMvoCW2ZAMngdQow9e93gMliaG
AG/GrR1zvpCXwKeswuNFAfzFG7y2SS/PeRn1G8AvyQrXvHjHzTmJggV7SQ6EwvBmBDuw+zjKVDYw
Dm99K1E9eylVZNb0SIf0yT1z1qvm5KNn8uzF4uVuL0R6Vp0MYLF3qs0hD5WbOHbZ9untNDIvqwWB
R/MkXZqegsZCBPfL3zfMzKtqBP2AE+uXHW2tr/saGiK3TPpQZGnKorRrgSW4S7yOaBHG+nDo4wyE
eF9/z0G6NGGu0uoEmDR3oP/KVlSX0qwrtX4vADcRy0AHNJMAfJ+PfMtu9loIUuMPuG5wExkX0s4r
3xz7h3KrV9wNb8jfMJ3bWuQZDjKHRrmaq2dcT+T7Luv3iQBFoStq08ewHwR/cdvqJBteX5eEuTww
A/47bDGFmuC5OxZZpF+jCSEY8F8/CufQhOxnzqqVl2zvEBLm0WgzFUJokagc8XcZAmK4jcFjPN9D
9CmymnAjKDB0oNtOSFfwuLp//eAsE/1Gr70JRQaR9pU3il6+GSsm4pfBbmzfJcDK7qhdd2JxI632
vrc=
=tjhs
-----END PGP SIGNATURE-----


Attachment: None (type=text/plain)