SUSE Security Update: Security update for Mozilla Firefox
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0580-1
Rating:             important
References:         #758408 
Cross-References:   CVE-2011-3062 CVE-2012-0468 CVE-2012-0469
                    CVE-2012-0470 CVE-2012-0471 CVE-2012-0472
                    CVE-2012-0473 CVE-2012-0474 CVE-2012-0477
                    CVE-2012-0478 CVE-2012-0479
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11 SP2
                    SUSE Linux Enterprise Software Development Kit 11 SP1
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Server 11 SP1 for VMware
                    SUSE Linux Enterprise Server 11 SP1
                    SUSE Linux Enterprise Desktop 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________

   An update that fixes 11 vulnerabilities is now available.
   It includes two new package versions.

Description:


   MozillaFirefox was updated to the 10.0.4 ESR release to fix
   various bugs  and security issues.

   *

   MFSA 2012-20: Mozilla developers identified and fixed
   several memory safety bugs in the browser engine used in
   Firefox and other Mozilla-based products. Some of these
   bugs showed evidence of memory corruption under certain
   circumstances, and we presume that with enough effort at
   least some of these could be exploited to run arbitrary
   code.

   In general these flaws cannot be exploited through
   email in the Thunderbird and SeaMonkey products because
   scripting is disabled, but are potentially a risk in
   browser or browser-like contexts in those products.

   Christian Holler a reported memory safety and
   security problem affecting Firefox 11. (CVE-2012-0468)

   Bob Clary, Christian Holler, Brian Hackett, Bobby
   Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse
   Ruderman, Julian Seward, and Olli Pettay reported memory
   safety problems and crashes that affect Firefox ESR and
   Firefox 11. (CVE-2012-0467)

   *

   MFSA 2012-22 / CVE-2012-0469: Using the Address
   Sanitizer tool, security researcher Aki Helin from OUSPG
   found that IDBKeyRange of indexedDB remains in the
   XPConnect hashtable instead of being unlinked before being
   destroyed. When it is destroyed, this causes a
   use-after-free, which is potentially exploitable.

   *

   MFSA 2012-23 / CVE-2012-0470: Using the Address
   Sanitizer tool, security researcher Atte Kettunen from
   OUSPG found a heap corruption in gfxImageSurface which
   allows for invalid frees and possible remote code
   execution. This happens due to float error, resulting from
   graphics values being passed through different number
   systems.

   *

   MFSA 2012-24 / CVE-2012-0471: Anne van Kesteren of
   Opera Software found a multi-octet encoding issue where
   certain octets will destroy the following octets in the
   processing of some multibyte character sets. This can leave
   users vulnerable to cross-site scripting (XSS) attacks on
   maliciously crafted web pages.

   *

   MFSA 2012-25 / CVE-2012-0472: Security research firm
   iDefense reported that researcher wushi of team509
   discovered a memory corruption on Windows Vista and Windows
   7 systems with hardware acceleration disabled or using
   incompatible video drivers. This is created by using
   cairo-dwrite to attempt to render fonts on an unsupported
   code path. This corruption causes a potentially exploitable
   crash on affected systems.

   *

   MFSA 2012-26 / CVE-2012-0473: Mozilla community
   member Matias Juntunen discovered an error in WebGLBuffer
   where FindMaxElementInSubArray receives wrong template
   arguments from FindMaxUshortElement. This bug causes
   maximum index to be computed incorrectly within
   WebGL.drawElements, allowing the reading of illegal video
   memory.

   *

   MFSA 2012-27 / CVE-2012-0474: Security researchers   Jordi Chancel and Eddy Bordi reported that they could
   short-circuit page loads to show the address of a different
   site than what is loaded in the window in the addressbar.
   Security researcher Chris McGowen independently reported
   the same flaw, and further demonstrated that this could
   lead to loading scripts from the attacker's site, leaving
   users vulnerable to cross-site scripting (XSS) attacks.

   *

   MFSA 2012-28 / CVE-2012-0475: Security researcher
   Simone Fabiano reported that if a cross-site XHR or
   WebSocket is opened on a web server on a non-standard port
   for web traffic while using an IPv6 address, the browser
   will send an ambiguous origin headers if the IPv6 address
   contains at least 2 consecutive 16-bit fields of zeroes. If
   there is an origin access control list that uses IPv6
   literals, this issue could be used to bypass these access
   controls on the server.

   *

   MFSA 2012-29 / CVE-2012-0477: Security researcher
   Masato Kinugawa found that during the decoding of
   ISO-2022-KR and ISO-2022-CN character sets, characters near
   1024 bytes are treated incorrectly, either doubling or
   deleting bytes. On certain pages it might be possible for
   an attacker to pad the output of the page such that these
   errors fall in the right place to affect the structure of
   the page, allowing for cross-site script (XSS) injection.

   *

   MFSA 2012-30 / CVE-2012-0478: Mozilla community
   member Ms2ger found an image rendering issue with WebGL
   when texImage2D uses use JSVAL_TO_OBJECT on arbitrary
   objects. This can lead to a crash on a maliciously crafted
   web page. While there is no evidence that this is directly
   exploitable, there is a possibility of remote code
   execution.

   *

   MFSA 2012-31 / CVE-2011-3062: Mateusz Jurczyk of the
   Google Security Team discovered an off-by-one error in the
   OpenType Sanitizer using the Address Sanitizer tool. This
   can lead to an out-of-bounds read and execution of an
   uninitialized function pointer during parsing and possible
   remote code execution.

   *

   MFSA 2012-32 / CVE-2011-1187: Security researcher
   Daniel Divricean reported that a defect in the error
   handling of javascript errors can leak the file names and
   location of javascript files on a server, leading to
   inadvertent information disclosure and a vector for further
   attacks.

   *

   MFSA 2012-33 / CVE-2012-0479: Security researcher
   Jeroen van der Gun reported that if RSS or Atom XML invalid
   content is loaded over HTTPS, the addressbar updates to
   display the new location of the loaded resource, including
   SSL indicators, while the main window still displays the
   previously loaded content. This allows for phishing attacks
   where a malicious page can spoof the identify of another
   seemingly secure site.

   Security Issue references:

   * CVE-2012-0468
   
   * CVE-2012-0469
   
   * CVE-2012-0470
   
   * CVE-2012-0471
   
   * CVE-2012-0472
   
   * CVE-2012-0473
   
   * CVE-2012-0474
   
   * CVE-2012-0477
   
   * CVE-2012-0478
   
   * CVE-2011-3062
   
   * CVE-2012-0479
   


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11 SP2:

      zypper in -t patch sdksp1-firefox-201204-6224

   - SUSE Linux Enterprise Software Development Kit 11 SP1:

      zypper in -t patch sdksp1-firefox-201204-6224

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp1-firefox-201204-6224

   - SUSE Linux Enterprise Server 11 SP1 for VMware:

      zypper in -t patch slessp1-firefox-201204-6224

   - SUSE Linux Enterprise Server 11 SP1:

      zypper in -t patch slessp1-firefox-201204-6224

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp1-firefox-201204-6224

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-firefox-201204-6224

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.13.4]:

      mozilla-nss-devel-3.13.4-0.2.1

   - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.13.4]:

      mozilla-nss-devel-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.4 and 3.13.4]:

      MozillaFirefox-10.0.4-0.3.3
      MozillaFirefox-translations-10.0.4-0.3.3
      libfreebl3-3.13.4-0.2.1
      mozilla-nss-3.13.4-0.2.1
      mozilla-nss-tools-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64) [New Version: 3.13.4]:

      libfreebl3-32bit-3.13.4-0.2.1
      mozilla-nss-32bit-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP2 (ia64) [New Version: 3.13.4]:

      libfreebl3-x86-3.13.4-0.2.1
      mozilla-nss-x86-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 10.0.4 and 3.13.4]:

      MozillaFirefox-10.0.4-0.3.3
      MozillaFirefox-translations-10.0.4-0.3.3
      libfreebl3-3.13.4-0.2.1
      mozilla-nss-3.13.4-0.2.1
      mozilla-nss-tools-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 3.13.4]:

      libfreebl3-32bit-3.13.4-0.2.1
      mozilla-nss-32bit-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.4 and 3.13.4]:

      MozillaFirefox-10.0.4-0.3.3
      MozillaFirefox-translations-10.0.4-0.3.3
      libfreebl3-3.13.4-0.2.1
      mozilla-nss-3.13.4-0.2.1
      mozilla-nss-tools-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 3.13.4]:

      libfreebl3-32bit-3.13.4-0.2.1
      mozilla-nss-32bit-3.13.4-0.2.1

   - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 3.13.4]:

      libfreebl3-x86-3.13.4-0.2.1
      mozilla-nss-x86-3.13.4-0.2.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 10.0.4 and 3.13.4]:

      MozillaFirefox-10.0.4-0.3.3
      MozillaFirefox-translations-10.0.4-0.3.3
      libfreebl3-3.13.4-0.2.1
      mozilla-nss-3.13.4-0.2.1
      mozilla-nss-tools-3.13.4-0.2.1

   - SUSE Linux Enterprise Desktop 11 SP2 (x86_64) [New Version: 3.13.4]:

      libfreebl3-32bit-3.13.4-0.2.1
      mozilla-nss-32bit-3.13.4-0.2.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 10.0.4 and 3.13.4]:

      MozillaFirefox-10.0.4-0.3.3
      MozillaFirefox-translations-10.0.4-0.3.3
      libfreebl3-3.13.4-0.2.1
      mozilla-nss-3.13.4-0.2.1
      mozilla-nss-tools-3.13.4-0.2.1

   - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 3.13.4]:

      libfreebl3-32bit-3.13.4-0.2.1
      mozilla-nss-32bit-3.13.4-0.2.1


References:

   https://www.suse.com/security/cve/CVE-2011-3062.html
   https://www.suse.com/security/cve/CVE-2012-0468.html
   https://www.suse.com/security/cve/CVE-2012-0469.html
   https://www.suse.com/security/cve/CVE-2012-0470.html
   https://www.suse.com/security/cve/CVE-2012-0471.html
   https://www.suse.com/security/cve/CVE-2012-0472.html
   https://www.suse.com/security/cve/CVE-2012-0473.html
   https://www.suse.com/security/cve/CVE-2012-0474.html
   https://www.suse.com/security/cve/CVE-2012-0477.html
   https://www.suse.com/security/cve/CVE-2012-0478.html
   https://www.suse.com/security/cve/CVE-2012-0479.html
   https://bugzilla.novell.com/758408
   https://login.microfocus.com/nidp/app/login

SuSE: 2012:0580-1: important: Mozilla Firefox

May 2, 2012
An update that fixes 11 vulnerabilities is now available

Summary

MozillaFirefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. * MFSA 2012-20: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. Christian Holler a reported memory safety and security problem affecting Firefox 11. (CVE-2012-0468) Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay reported memory safety problems a...

Read the Full Advisory

References

#758408

Cross- CVE-2011-3062 CVE-2012-0468 CVE-2012-0469

CVE-2012-0470 CVE-2012-0471 CVE-2012-0472

CVE-2012-0473 CVE-2012-0474 CVE-2012-0477

CVE-2012-0478 CVE-2012-0479

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP2

SUSE Linux Enterprise Software Development Kit 11 SP1

SUSE Linux Enterprise Server 11 SP2

SUSE Linux Enterprise Server 11 SP1 for VMware

SUSE Linux Enterprise Server 11 SP1

SUSE Linux Enterprise Desktop 11 SP2

SUSE Linux Enterprise Desktop 11 SP1

https://www.suse.com/security/cve/CVE-2011-3062.html

https://www.suse.com/security/cve/CVE-2012-0468.html

https://www.suse.com/security/cve/CVE-2012-0469.html

https://www.suse.com/security/cve/CVE-2012-0470.html

https://www.suse.com/security/cve/CVE-2012-0471.html

https://www.suse.com/security/c...

Read the Full Advisory

Severity
Announcement ID: SUSE-SU-2012:0580-1
Rating: important

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved