Ubuntu: USN-1681-3 Critical: Firefox Denial of Service Fix

ubuntu

January 22, 2013

USN-1681-1 introduced a regression in Firefox.

Summary

USN-1681-1 introduced a regression in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-1681-1 fixed vulnerabilities in Firefox. Due to an upstream regression,

some translations became unusable after upgrading. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

Christoph Diehl, Christian Holler, Mats Palmgren, Chiaki Ishikawa, Bill

Gianopoulos, Benoit Jacob, Gary Kwong, Robert O'Callahan, Jesse Ruderman,

and Julian Seward discovered multiple memory safety issues affecting

Firefox. If the user were tricked into opening a specially crafted page, an

attacker could possibly exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0769, CVE-2013-0749, CVE-2013-0770)

Abhishek Arya discovered several user-after-free and buffer overflows in

Firefox. An attacker could exploit ...

Read the Full Advisory

Topics Covered

security advisory denial of service software update firefox ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  firefox                         18.0.1+build1-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  firefox                         18.0.1+build1-0ubuntu0.12.04.1

Ubuntu 11.10:
  firefox                         18.0.1+build1-0ubuntu0.11.10.1

Ubuntu 10.04 LTS:
  firefox                         18.0.1+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.