USN-3216-2: Firefox regression<\/p>\n
30th March, 2017<\/em><\/p>\n A security issue affects these releases of Ubuntu and its USN-3216-1 introduced a regression in Firefox.\n<\/p>\n USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a We apologize for the inconvenience.<\/p>\n Original advisory details:<\/p>\n Multiple security issues were discovered in Firefox. If a user were The problem can be corrected by updating your system to the following To update your system, please follow these instructions: After a standard system update you need to restart Firefox to make LP: 1671079<\/a><\/p>\n Source: USN-3216-2: Firefox regression<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" USN-3216-2: Firefox regression Ubuntu Security Notice USN-3216-2 30th March, 2017 firefox regression A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary USN-3216-1 introduced a regression in Firefox. Software description firefox – Mozilla Open Source web browser Details USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in astartup crash when Firefox is used with XRDP. This update fixes theproblem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, spoof the addressbar, spoof the print dialog, cause a denial of service via application crash or hang, or execute arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400, CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-15198","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/15198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=15198"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/15198\/revisions"}],"predecessor-version":[{"id":15199,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/15198\/revisions\/15199"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=15198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=15198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=15198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}firefox regression<\/h3>\n
\n derivatives:<\/p>\n\n
Summary<\/h3>\n
Software description<\/h3>\n
\n
\n – Mozilla Open Source web browser<\/p>\n<\/li>\n<\/ul>\nDetails<\/h3>\n
startup crash when Firefox is used with XRDP. This update fixes the
problem.<\/p>\n
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same origin restrictions, obtain
sensitive information, spoof the addressbar, spoof the print dialog,
cause a denial of service via application crash or hang, or execute
arbitrary code. (CVE-2017-5398<\/a>, CVE-2017-5399<\/a>, CVE-2017-5400<\/a>,
CVE-2017-5401<\/a>, CVE-2017-5402<\/a>, CVE-2017-5403<\/a>, CVE-2017-5404<\/a>, CVE-2017-5405<\/a>,
CVE-2017-5406<\/a>, CVE-2017-5407<\/a>, CVE-2017-5408<\/a>, CVE-2017-5410<\/a>, CVE-2017-5412<\/a>,
CVE-2017-5413<\/a>, CVE-2017-5414<\/a>, CVE-2017-5415<\/a>, CVE-2017-5416<\/a>, CVE-2017-5417<\/a>,
CVE-2017-5418<\/a>, CVE-2017-5419<\/a>, CVE-2017-5420<\/a>, CVE-2017-5421<\/a>, CVE-2017-5422<\/a>,
CVE-2017-5426<\/a>, CVE-2017-5427<\/a>)<\/p>\nUpdate instructions<\/h3>\n
\npackage version:<\/p>\n\n
\n
\n 52.0.2+build1-0ubuntu0.16.10.1<\/a>
\n <\/span>\n <\/dd>\n
\n
\n 52.0.2+build1-0ubuntu0.16.04.1<\/a>
\n <\/span>\n <\/dd>\n
\n
\n 52.0.2+build1-0ubuntu0.14.04.1<\/a>
\n <\/span>\n <\/dd>\n
\n
\n 52.0.2+build1-0ubuntu0.12.04.1<\/a>
\n <\/span>\n <\/dd>\n<\/dl>\n
\nhttps:\/\/wiki.ubuntu.com\/Security\/Upgrades<\/a>.\n<\/p>\n
all the necessary changes.<\/p>\nReferences<\/h3>\n