USN-7065-1: Firefox vulnerability

Releases

• Ubuntu 20.04 LTS

Packages

• firefox - Mozilla Open Source web browser

Details

Damien Schaeffer discovered that Firefox did not properly manage memory in
the content process when handling Animation timelines, leading to a use
after free vulnerability. An attacker could possibly use this issue to
achieve remote code execution.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• firefox - 131.0.2+build1-0ubuntu0.20.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

• CVE-2024-9680

Related notices

• USN-7066-1: thunderbird-locale-en-gb, thunderbird-locale-zh-cn, thunderbird-locale-id, thunderbird-locale-ms, thunderbird-locale-nb-no, thunderbird-locale-en, thunderbird-locale-sq, thunderbird-locale-cs, thunderbird-locale-dsb, thunderbird-locale-es-es, thunderbird-locale-ga-ie, thunderbird-locale-ru, thunderbird-locale-ja, thunderbird-locale-sk, thunderbird-locale-br, thunderbird-locale-nb, thunderbird-locale-pt-br, thunderbird-locale-hr, thunderbird-locale-hy, thunderbird-locale-ca, thunderbird-locale-lt, thunderbird-locale-pt, xul-ext-lightning, thunderbird-locale-fy, thunderbird-locale-kk, thunderbird-locale-hsb, thunderbird-locale-ro, thunderbird-locale-bn, thunderbird-locale-ar, thunderbird-locale-cak, thunderbird-locale-vi, thunderbird-locale-zh-tw, thunderbird-locale-ta-lk, thunderbird-mozsymbols, thunderbird-locale-fy-nl, thunderbird-locale-pa, thunderbird-locale-da, thunderbird-locale-cy, thunderbird-locale-es-ar, thunderbird-locale-de, thunderbird-locale-bn-bd, thunderbird-locale-is, thunderbird-locale-kab, thunderbird-locale-zh-hant, thunderbird-locale-th, thunderbird-locale-fa, thunderbird-locale-sv, thunderbird-locale-pt-pt, thunderbird-locale-af, thunderbird-locale-ga, thunderbird-locale-en-us, thunderbird-locale-el, thunderbird-locale-fr, thunderbird-locale-ko, thunderbird-locale-uz, thunderbird-locale-ka, thunderbird-locale-he, thunderbird-locale-gd, thunderbird-locale-sl, thunderbird-locale-nn, thunderbird-locale-gl, thunderbird-locale-pa-in, thunderbird-locale-es, thunderbird-locale-mk, thunderbird-locale-bg, thunderbird-locale-ta, thunderbird-locale-si, thunderbird-dev, thunderbird-locale-uk, thunderbird-locale-hu, thunderbird-locale-it, thunderbird-locale-fi, thunderbird-locale-nn-no, xul-ext-gdata-provider, thunderbird-locale-be, thunderbird-locale-pl, thunderbird, thunderbird-locale-lv, thunderbird-locale-sv-se, thunderbird-locale-rm, thunderbird-locale-tr, thunderbird-locale-sr, thunderbird-gnome-support, thunderbird-locale-et, thunderbird-locale-ast, thunderbird-locale-nl, thunderbird-locale-eu, xul-ext-calendar-timezones, thunderbird-locale-zh-hans