Objavljena je revizija sigurnosne preporuke prvotno objavljene pod oznakom USN-1463-1, a opisuje ranjivost preglednika Firefox. Ranjivost omogućuje izvođenje DoS napada, pokretanje proizvoljnog programskog koda, izmjenu podataka te otkrivanje osjetljivih informacija.
Paket:
unity-2d 3.x
Operacijski sustavi:
Ubuntu Linux 11.04
Problem:
korupcija memorije, pogreška u programskoj komponenti
Propusti su posljedica grešaka u WebGL implementaciji, ASN.1 dekoderu, prepisivanja spremnika, i druge. Revizija je objavljena jer prethodno izdana nadogradnja ne ispravlja pogreške za inačicu sustava Ubuntu 11.04.
Posljedica:
Udaljeni zlonamjerni korisnik bi mogao iskoristiti propust za DoS napad, izvršavanje proizvoljnog programskog koda, pregled/promjenu pojedinih podataka.
Rješenje:
Svim se korisnicima savjetuje nadogradnja na najnoviju inačicu paketa.
==========================================================================
Ubuntu Security Notice USN-1463-5
June 27, 2012
unity-2d update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.04
Summary:
Popup menus were not working in Thunderbird under Unity 2D when started
from the launcher.
Software Description:
- unity-2d: Unity interface for non-accelerated graphics cards
Details:
USN-1463-2 fixed a bug in Unity 2D exposed by a recent Firefox update. It
was discovered that the issue was only partially fixed on Ubuntu 11.04.
When Thunderbird was started from the launcher, Thunderbird was still
unable to obtain pointer grabs under certain conditions. This update fixes
the problem.
Original advisory details:
USN-1463-1 fixed vulnerabilities in Firefox. The Firefox update exposed a
bug in Unity 2D which resulted in Firefox being unable to obtain pointer
grabs in order to open popup menus. This update fixes the problem.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 11.04:
unity-2d-launcher 3.8.4.1-0ubuntu1.2
After a standard system update you need to restart your Unity 2D session to
make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1463-5
http://www.ubuntu.com/usn/usn-1463-1
http://www.ubuntu.com/usn/usn-1463-2, https://launchpad.net/bugs/1016386
Package Information:
https://launchpad.net/ubuntu/+source/unity-2d/3.8.4.1-0ubuntu1.2
Posljednje sigurnosne preporuke