Ubuntu: 1400-2 Security Advisory: Fixes for Firefox Threats

ubuntu

March 16, 2012

This update provides compatible ubufox packages for the latest Firefox.

Summary

This update provides compatible ubufox packages for the latest Firefox.

Software Description:

- ubufox: Finnish spell-checker extension for Firefox

Details:

USN-1400-1 fixed vulnerabilities in Firefox. This update provides an

updated ubufox package for use with the latest Firefox.

Original advisory details:

Soroush Dalili discovered that Firefox did not adequately protect against

dropping JavaScript links onto a frame. A remote attacker could, through

cross-site scripting (XSS), exploit this to modify the contents or steal

confidential data. (CVE-2012-0455)

Atte Kettunen discovered a use-after-free vulnerability in Firefox's

handling of SVG animations. An attacker could potentially exploit this to

execute arbitrary code with the privileges of the user invoking Firefox.

(CVE-2012-0457)

Atte Kettunen discovered an out of bounds read vulnerability in Firefox's

handling of SVG Filters. An attacker could potentially exploit this to make

data ...

Read the Full Advisory

Topics Covered

security advisory code execution Ubuntu update instructions Firefox issues XSS exploit ubufox package

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  xul-ext-ubufox                  1.0.3-0ubuntu1

Ubuntu 11.04:
  xul-ext-ubufox                  0.9.4-0ubuntu1

Ubuntu 10.10:
  xul-ext-ubufox                  0.9.4-0ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  xul-ext-ubufox                  0.9.4-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.