Ubuntu 13.10: USN-2102-2 Moderate: Firefox Regression And Crash Fix

ubuntu

February 19, 2014

USN-2102-1 introduced a regression in Firefox.

Summary

USN-2102-1 introduced a regression in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-2102-1 fixed vulnerabilities in Firefox. The update introduced a

regression which could make Firefox crash under some circumstances. This

update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Christian Holler, Terrence Cole, Jesse Ruderman, Gary Kwong, Eric

Rescorla, Jonathan Kew, Dan Gohman, Ryan VanderMeulen, Carsten Book,

Andrew Sutherland, Byron Campen, Nicholas Nethercote, Paul Adenot, David

Baron, Julian Seward and Sotaro Ikeda discovered multiple memory safety

issues in Firefox. If a user were tricked in to opening a specially

crafted website, an attacker could potentially exploit these to cause a

denial of service via application crash, or execute arbitrary code with

the privileges of the user invoking Firefox. (CVE-2014-1477,

CVE-2014-1478)

Cody Crews discovered a method t...

Read the Full Advisory

Topics Covered

security advisory denial of service security issue software fix firefox application crash ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  firefox                         27.0.1+build1-0ubuntu0.13.10.1

Ubuntu 12.10:
  firefox                         27.0.1+build1-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  firefox                         27.0.1+build1-0ubuntu0.12.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.