Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 15.10 USN-2893-1 Critical: Same-Origin Bypass In Firefox

ubuntu
Calendar Grey February 11, 2016
Scroller Ubuntu
A significant vulnerability in Firefox has been discovered that impacts several Ubuntu versions. Make sure to update promptly to protect your system.
A same-origin-policy bypass was discovered in Firefox.

Summary

A same-origin-policy bypass was discovered in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Jason Pang discovered that service workers intercept responses to plugin

network requests made through the browser. An attacker could potentially

exploit this to bypass same origin restrictions using the Flash plugin.

(CVE-2016-1949)

Topics%20covered

Topics Covered

security advisory security issue critical firefox ubuntu bypass same-origin

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  firefox                         44.0.2+build1-0ubuntu0.15.10.1

Ubuntu 14.04 LTS:
  firefox                         44.0.2+build1-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  firefox                         44.0.2+build1-0ubuntu0.12.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2893-1

CVE-2016-1949

Severity
critical
Lowest
Low
Medium
High
Critical

February 11, 2016

Topics%20covered

Topics Covered

security advisory security issue critical firefox ubuntu bypass same-origin

Package Information

https://launchpad.net/ubuntu/+source/firefox/44.0.2+build1-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/firefox/44.0.2+build1-0ubuntu0.14.04.1
https://launchpad.net/ubuntu/+source/firefox/44.0.2+build1-0ubuntu0.12.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.