Ubuntu 12.04 LTS: USN-1509-2 Moderate Ubufox Update for Firefox

ubuntu

July 18, 2012

This update provides compatible ubufox packages for the latest Firefox.

Summary

This update provides compatible ubufox packages for the latest Firefox.

Software Description:

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

Details:

USN-1509-1 fixed vulnerabilities in Firefox. This update provides an updated

ubufox package for use with the lastest Firefox.

Original advisory details:

Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Brian Smith,

Gary Kwong, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey discovered

memory safety issues affecting Firefox. If the user were tricked into opening a

specially crafted page, an attacker could possibly exploit these to cause a

denial of service via application crash, or potentially execute code with the

privileges of the user invoking Firefox. (CVE-2012-1948, CVE-2012-1949)

Mario Gomes discovered that the address bar may be incorrectly updated.

Drag-and-drop events in the address bar may cause the address of the previous

site to be displ...

Read the Full Advisory

Topics Covered

security advisory denial of service security issue firefox ubuntu memory safety ubufox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  ubufox                          2.1.1-0ubuntu0.12.04.1
  xul-ext-ubufox                  2.1.1-0ubuntu0.12.04.1

Ubuntu 11.10:
  ubufox                          2.1.1-0ubuntu0.11.10.1
  xul-ext-ubufox                  2.1.1-0ubuntu0.11.10.1

Ubuntu 11.04:
  ubufox                          2.1.1-0ubuntu0.11.04.1
  xul-ext-ubufox                  2.1.1-0ubuntu0.11.04.1

Ubuntu 10.04 LTS:
  ubufox                          2.1.1-0ubuntu0.10.04.1
  xul-ext-ubufox                  2.1.1-0ubuntu0.10.04.1

When upgrading, users should be aware of the following:

- In Ubuntu 11.04, unity-2d users may lose the ability to view drop-down menus,
context menus, and perform drag-and-drop operations in Firefox. This is a known
issue being tracked in https://bugs.launchpad.net/ubuntu/+source/unity-2d/+bug/1020198 and may be fixed in a
later update.

After a standard system update you need to restart Firefox to make
all the necessary changes.