Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 15.04 USN-2743-2 Critical: Ubufox Firefox Update Against DoS

ubuntu
Calendar Grey September 22, 2015
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
This update provides compatible packages for Firefox 41

Summary

This update provides compatible packages for Firefox 41

Software Description:

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

Details:

USN-2743-1 fixed vulnerabilities in Firefox. This update provides the

corresponding update for Ubufox.

Original advisory details:

Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David

Major, Andrew McCreight, Cameron McCormack, Bob Clary and Randell Jesup

discovered multiple memory safety issues in Firefox. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service via application

crash, or execute arbitrary code with the privileges of the user invoking

Firefox. (CVE-2015-4500, CVE-2015-4501)

André Bargull discovered that when a web page creates a scripted proxy

for the window with a handler defined a certain way, a reference to the

inner window will be passed, rather than that of the oute...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical issue ubuntu firefox update ubufox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  xul-ext-ubufox                  3.2-0ubuntu0.15.04.1

Ubuntu 14.04 LTS:
  xul-ext-ubufox                  3.2-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  xul-ext-ubufox                  3.2-0ubuntu0.12.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2743-2

https://ubuntu.com/security/notices/USN-2743-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1498681

Severity
critical
Lowest
Low
Medium
High
Critical

September 22, 2015

Topics%20covered

Topics Covered

security advisory denial of service critical issue ubuntu firefox update ubufox

Package Information

https://launchpad.net/ubuntu/+source/ubufox/3.2-0ubuntu0.15.04.1
https://launchpad.net/ubuntu/+source/ubufox/3.2-0ubuntu0.14.04.1
https://launchpad.net/ubuntu/+source/ubufox/3.2-0ubuntu0.12.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.