USN-5037-2: Firefox regression | Ubuntu security notices

Packages

firefox - Mozilla Open Source web browser

Details

USN-5037-1 fixed vulnerabilities in Firefox. The update introduced a
regression that caused Firefox to repeatedly prompt for a password. This
update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, trick a user into accepting unwanted permissions, or execute
arbitrary code.

USN-5037-1 fixed vulnerabilities in Firefox. The update introduced a
regression that caused Firefox to repeatedly prompt for a password. This
update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, trick a user into accepting unwanted permissions, or execute
arbitrary code.

Update instructions

After a standard system update you need to restart Firefox to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
21.04 hirsute	firefox – 91.0.2+build1-0ubuntu0.21.04.1
20.04 focal	firefox – 91.0.2+build1-0ubuntu0.20.04.1
18.04 bionic	firefox – 91.0.2+build1-0ubuntu0.18.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/1941496