Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 11.04: USN-1400-5 Moderately Fixes Firefox Proxy Vulnerability

ubuntu
Calendar Grey April 20, 2012
Scroller Ubuntu
The GSettings issue impacts the system proxy configuration for Firefox on Ubuntu. An update is necessary to re-enable proper functionality.
Firefox's ability to use system proxy settings regressed.

Summary

Firefox's ability to use system proxy settings regressed.

Software Description:

- gsettings-desktop-schemas: GSettings desktop-wide schemas

Details:

USN-1400-1 fixed vulnerabilities in Firefox. Firefox 11 started using

GSettings to access the system proxy settings. If there is a GSettings

proxy settings schema, Firefox will consume it. The GSettings proxy

settings schema that was shipped by default was unused by other

applications and broke Firefox's ability to use system proxy settings. This

update removes the unused schema. We apologize for the inconvenience.

Original advisory details:

Soroush Dalili discovered that Firefox did not adequately protect against

dropping JavaScript links onto a frame. A remote attacker could, through

cross-site scripting (XSS), exploit this to modify the contents or steal

confidential data. (CVE-2012-0455)

Atte Kettunen discovered a use-after-free vulnerability in Firefox's

handling of SVG animations. An attacker c...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory firefox ubuntu gsettings-regression system-proxy

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  gsettings-desktop-schemas       3.0.0-0ubuntu1.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1400-5

https://ubuntu.com/security/notices/USN-1400-1

https://bugs.launchpad.net/ubuntu/+source/gsettings-desktop-schemas/+bug/956961

Severity
important
Lowest
Low
Medium
High
Critical

April 20, 2012

Topics%20covered

Topics Covered

security advisory firefox ubuntu gsettings-regression system-proxy

Package Information

https://launchpad.net/ubuntu/+source/gsettings-desktop-schemas/3.0.0-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.