# firefox 76.0+build2-0ubuntu0.18.04.1: firefox 76.0+build2-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

firefox 76.0+build2-0ubuntu0.18.04.1, released May 6, 2020, fixes 8 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-76.0-build2-0ubuntu0.18.04.1
- Platform: Linux
- Released: May 6, 2020
- Priority: Urgent (Closes CVE-2020-6831, rated Critical)
- CVEs: 8, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [firefox](https://patchblox.com/security/data/product/linux/firefox.md) | Ubuntu 18.04.6 LTS (bionic) | 76.0+build2-0ubuntu0.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-6831](https://patchblox.com/security/data/cve/CVE-2020-6831.md) | Urgent | Firefox ESR: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. | 9.8 | 0.0580 |  |
| [CVE-2020-12395](https://patchblox.com/security/data/cve/CVE-2020-12395.md) | Urgent | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox… | 9.8 | 0.0260 |  |
| [CVE-2020-12387](https://patchblox.com/security/data/cve/CVE-2020-12387.md) | Urgent | Firefox ESR: A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. | 8.8 | 0.0144 |  |
| [CVE-2020-12392](https://patchblox.com/security/data/cve/CVE-2020-12392.md) | Urgent | Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request,… | 6.1 | 0.0035 |  |
| [CVE-2020-12396](https://patchblox.com/security/data/cve/CVE-2020-12396.md) | High | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75. | 9.8 | 0.0168 |  |
| [CVE-2020-12390](https://patchblox.com/security/data/cve/CVE-2020-12390.md) | High | Firefox ESR: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. | 9.8 | 0.0162 |  |
| [CVE-2020-12391](https://patchblox.com/security/data/cve/CVE-2020-12391.md) | High | Firefox ESR: Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. | 7.5 | 0.0146 |  |
| [CVE-2020-12394](https://patchblox.com/security/data/cve/CVE-2020-12394.md) | Routine | Firefox ESR: A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current… | 3.3 | 0.0029 |  |

---

Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.