Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
USN-1463-1 introduced regressions in Firefox.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
USN-1463-1 fixed vulnerabilities in Firefox. The new package caused a
regression in the rendering of Hebrew text and the ability of the Hotmail
inbox to auto-update. This update fixes the problem.
Original advisory details:
Jesse Ruderman, Igor Bukanov, Bill McCloskey, Christian Holler, Andrew
McCreight, Olli Pettay, Boris Zbarsky, and Brian Bondy discovered memory
safety issues affecting Firefox. If the user were tricked into opening a
specially crafted page, an attacker could possibly exploit these to cause a
denial of service via application crash, or potentially execute code with
the privileges of the user invoking Firefox. (CVE-2012-1937, CVE-2012-1938)
It was discovered that Mozilla's WebGL implementation exposed a bug in
certain NVIDIA graphics drivers. The impact of this issue has not been
disclosed at this time. (CVE...
The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: firefox 13.0.1+build1-0ubuntu0.12.04.1 Ubuntu 11.10: firefox 13.0.1+build1-0ubuntu0.11.10.1 Ubuntu 11.04: firefox 13.0.1+build1-0ubuntu0.11.04.1 Ubuntu 10.04 LTS: firefox 13.0.1+build1-0ubuntu0.10.04.1 After a standard system update you need to restart Firefox to make all the necessary changes.
https://ubuntu.com/security/notices/USN-1463-3
https://ubuntu.com/security/notices/USN-1463-1
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1013425
Get the latest Linux and open source security news straight to your inbox.