Ubuntu 12.10 USN-1681-4 Moderate: Firefox Regression Fix

ubuntu

February 5, 2013

USN-1681-1 introduced a regression in Firefox.

Summary

USN-1681-1 introduced a regression in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-1681-1 fixed vulnerabilities in Firefox. Due to an upstream regression,

Firefox suffered from instabilities when accessing some websites. This

update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Christoph Diehl, Christian Holler, Mats Palmgren, Chiaki Ishikawa, Bill

Gianopoulos, Benoit Jacob, Gary Kwong, Robert O'Callahan, Jesse Ruderman,

and Julian Seward discovered multiple memory safety issues affecting

Firefox. If the user were tricked into opening a specially crafted page, an

attacker could possibly exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0769, CVE-2013-0749, CVE-2013-0770)

Abhishek Arya discovered several user-after-free and buffer overflows in

Firefox. An attacker...

Read the Full Advisory

Topics Covered

security advisory firefox ubuntu regression browser stability

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  firefox                         18.0.2+build1-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  firefox                         18.0.2+build1-0ubuntu0.12.04.1

Ubuntu 11.10:
  firefox                         18.0.2+build1-0ubuntu0.11.10.1

Ubuntu 10.04 LTS:
  firefox                         18.0.2+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.