USN-4317-1

Details

Two use-after-free bugs were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit these to cause a denial of service or execute arbitrary code.

Affected Packages

firefox

Ubuntu 16.04 LTS

Fixed in:

74.0.1+build1-0ubuntu0.16.04.1

firefox

Ubuntu 18.04 LTS

Fixed in:

74.0.1+build1-0ubuntu0.18.04.1

References

REPORT

https://ubuntu.com/security/CVE-2020-6819

REPORT

https://ubuntu.com/security/CVE-2020-6820

ADVISORY

https://ubuntu.com/security/notices/USN-4317-1