Ubuntu 11.10: USN-1277-2 Moderate: Firefox Security Update Notice

ubuntu

November 23, 2011

This update provides packages compatible with Firefox 8.

Summary

This update provides packages compatible with Firefox 8.

Software Description:

- mozvoikko: Finnish spell-checker extension for Firefox

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

Details:

USN-1277-1 fixed vulnerabilities in Firefox. This update provides updated

Mozvoikko and ubufox packages for use with Firefox 8.

Original advisory details:

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled

invalid sequences in the Shift-JIS encoding. It may be possible to trigger

this crash without the use of debugging APIs, which might allow malicious

websites to exploit this vulnerability. An attacker could possibly use this

flaw this to steal data or inject malicious scripts into web content.

(CVE-2011-3648)

Marc Schoenefeld discovered that using Firebug to profile a JavaScript file

with many functions would cause Firefox to crash. An attacker might be able

to exploit this without using the debugging APIs, w...

Read the Full Advisory

Topics Covered

security advisory moderate denial of service security issue Ubuntu malicious code Firefox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  xul-ext-mozvoikko               1.10.0-0ubuntu2.1
  xul-ext-ubufox                  1.0-0ubuntu2.1

Ubuntu 11.04:
  xul-ext-mozvoikko               1.10.0-0ubuntu0.11.04.3
  xul-ext-ubufox                  0.9.2-0ubuntu0.11.04.2

After a standard system update you need to restart Firefox to make
all the necessary changes.