Ubuntu 15.04 LTS: USN-2702-3 Moderate: Firefox Regression Issues

ubuntu

August 20, 2015

USN-2702-1 introduced a regression in Firefox.

Summary

USN-2702-1 introduced a regression in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

USN-2702-1 fixed vulnerabilities in Firefox. After upgrading, some users

in the US reported that their default search engine switched to Yahoo.

This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley,

Chris Coulson, and Eric Rahm discovered multiple memory safety issues in

Firefox. If a user were tricked in to opening a specially crafted website,

an attacker could potentially exploit these to cause a denial of service

via application crash, or execute arbitrary code with the privileges of

the user invoking Firefox. (CVE-2015-4473, CVE-2015-4474)

Aki Helin discovered an out-of-bounds read when playing malformed MP3

content in some circumstances. If a user were tricked in to opening a

specially crafted website, an att...

Read the Full Advisory

Topics Covered

security advisory bug fix moderate severity firefox web browser ubuntu regression issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  firefox                         40.0+build4-0ubuntu0.15.04.4

Ubuntu 14.04 LTS:
  firefox                         40.0+build4-0ubuntu0.14.04.4

Ubuntu 12.04 LTS:
  firefox                         40.0+build4-0ubuntu0.12.04.4

After a standard system update you need to restart Firefox to make
all the necessary changes.