Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 12.10 USN-1786-2 Moderate: Unity Firefox Extension Update

ubuntu
Calendar Grey April 4, 2013
Scroller Ubuntu
Tackling vulnerabilities within Ubuntu's environment, especially the Unity Firefox Extension noted in update USN-1786-2, is vital for reducing risks of exploitation and cyberattacks
This update provides a compatible version of Unity Firefox Extension for Firefox 20.

Summary

This update provides a compatible version of Unity Firefox Extension for

Firefox 20.

Software Description:

- unity-firefox-extension: Unity Integration for Firefox

Details:

USN-1786-1 fixed vulnerabilities in Firefox. This update provides the

corresponding update for Unity Firefox Extension.

Original advisory details:

Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan

Sreckovic, Joe Drew, Andrew McCreight, Randell Jesup, Gary Kwong and

Mats Palmgren discovered multiple memory safety issues affecting Firefox.

If the user were tricked into opening a specially crafted page, an

attacker could possibly exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0788, CVE-2013-0789)

Ambroz Bizjak discovered an out-of-bounds array read in the

CERT_DecodeCertPackage function of the Network Security Services (NSS)

libary when decoding certai...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate denial of service information leak unity-firefox-extension

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  xul-ext-unity                   2.4.4-0ubuntu0.2

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1786-2

https://ubuntu.com/security/notices/USN-1786-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1161422

Severity
important
Lowest
Low
Medium
High
Critical

April 04, 2013

Topics%20covered

Topics Covered

security advisory moderate denial of service information leak unity-firefox-extension

Package Information

https://launchpad.net/ubuntu/+source/unity-firefox-extension/2.4.4-0ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.