Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 12.04 LTS USN-2936-2 Critical: Firefox Crash Due to Oxygen GTK

ubuntu
Calendar Grey May 2, 2016
Scroller Ubuntu
Resolution for Firefox failures associated with oxygen-gtk3 theme revisions in Ubuntu LTS incorporates crucial security enhancements.
USN-2936-1 caused Firefox to crash on startup with the Oxygen GTK theme

Summary

USN-2936-1 caused Firefox to crash on startup with the Oxygen GTK theme

Software Description:

- oxygen-gtk3: Oxygen widget theme for GTK3-based applications

Details:

USN-2936-1 fixed vulnerabilities in Firefox. The update caused Firefox to

crash on startup with the Oxygen GTK theme due to a pre-existing bug in

the Oxygen-GTK3 theme engine. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Christian Holler, Tyson Smith, Phil Ringalda, Gary Kwong, Jesse Ruderman,

Mats Palmgren, Carsten Book, Boris Zbarsky, David Bolter, Randell Jesup,

Andrew McCreight, and Steve Fink discovered multiple memory safety issues

in Firefox. If a user were tricked in to opening a specially crafted

website, an attacker could potentially exploit these to cause a denial of

service via application crash, or execute arbitrary code with the

privileges of the user invoking Firefox. (CVE-2016-2804, CVE-2016-2806,

CVE-2016-2807)

A...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update Ubuntu Critical Denial of Service Firefox Crash oxygen-gtk3

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  gtk3-engines-oxygen             1.0.2-0ubuntu3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2936-2

https://ubuntu.com/security/notices/USN-2936-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1575781

Severity
critical
Lowest
Low
Medium
High
Critical

May 02, 2016

Topics%20covered

Topics Covered

security advisory update Ubuntu Critical Denial of Service Firefox Crash oxygen-gtk3

Package Information

https://launchpad.net/ubuntu/+source/oxygen-gtk3/1.0.2-0ubuntu3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.