Ubuntu 13.04: USN-1924-2 Critical: Ubufox & Unity Firefox Update

ubuntu

August 6, 2013

This update provides compatible packages for Firefox 23.

Summary

This update provides compatible packages for Firefox 23.

Software Description:

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

- unity-firefox-extension: Unity Integration for Firefox

Details:

USN-1924-1 fixed vulnerabilities in Firefox. This update provides the

corresponding updates for Ubufox and Unity Firefox Extension.

Original advisory details:

Jeff Gilbert, Henrik Skupin, Ben Turner, Christian Holler,

Andrew McCreight, Gary Kwong, Jan Varga and Jesse Ruderman discovered

multiple memory safety issues in Firefox. If the user were tricked in to

opening a specially crafted page, an attacker could possibly exploit these

to cause a denial of service via application crash, or potentially execute

arbitrary code with the privileges of the user invoking Firefox.

(CVE-2013-1701, CVE-2013-1702)

A use-after-free bug was discovered when the DOM is modified during a

SetBody mutation event. If the user were tricked in to opening...

Read the Full Advisory

Topics Covered

security advisory denial of service update XSS Ubuntu Firefox memory safety

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  xul-ext-ubufox                  2.7-0ubuntu0.13.04.1

Ubuntu 12.10:
  xul-ext-ubufox                  2.7-0ubuntu0.12.10.1
  xul-ext-unity                   2.4.7-0ubuntu0.2

Ubuntu 12.04 LTS:
  xul-ext-ubufox                  2.7-0ubuntu0.12.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.