Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

Ubuntu 12.04 LTS USN-1463-3 Moderate: Firefox Rendering Defects

ubuntu
Calendar Grey June 20, 2012
Scroller Ubuntu
We provide updates and details to address Firefox regressions in Ubuntu from security advisory USN-1463-3, including patches and risk mitigation steps
USN-1463-1 introduced regressions in Firefox.

Summary

USN-1463-1 introduced regressions in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-1463-1 fixed vulnerabilities in Firefox. The new package caused a

regression in the rendering of Hebrew text and the ability of the Hotmail

inbox to auto-update. This update fixes the problem.

Original advisory details:

Jesse Ruderman, Igor Bukanov, Bill McCloskey, Christian Holler, Andrew

McCreight, Olli Pettay, Boris Zbarsky, and Brian Bondy discovered memory

safety issues affecting Firefox. If the user were tricked into opening a

specially crafted page, an attacker could possibly exploit these to cause a

denial of service via application crash, or potentially execute code with

the privileges of the user invoking Firefox. (CVE-2012-1937, CVE-2012-1938)

It was discovered that Mozilla's WebGL implementation exposed a bug in

certain NVIDIA graphics drivers. The impact of this issue has not been

disclosed at this time. (CVE...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  firefox                         13.0.1+build1-0ubuntu0.12.04.1

Ubuntu 11.10:
  firefox                         13.0.1+build1-0ubuntu0.11.10.1

Ubuntu 11.04:
  firefox                         13.0.1+build1-0ubuntu0.11.04.1

Ubuntu 10.04 LTS:
  firefox                         13.0.1+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1463-3

https://ubuntu.com/security/notices/USN-1463-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1013425

June 20, 2012

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.