Users can now upgrade to the latest version of the Firefox browser

Sep 5, 2014 14:53 GMT  ·  By

Canonical has published details about quite a few Firefox vulnerabilities in its Ubuntu 14.04 LTS and Ubuntu 12.04 LTS operating systems and the company has pushed a version of the software into the repositories.

Soon after Mozilla released the latest Firefox 32 Internet browser into the wild, Ubuntu maintainers have integrated this version into the official repos and now everyone can upgrade.

According to the Ubuntu security report, “Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman, JW Wang and David Weir discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox.”

“Michal Zalewski discovered that memory is not initialized properly during GIF rendering in some circumstances. If a user were tricked in to opening a specially crafted page, an attacker could potentially exploit this to steal confidential information.”

And these are just two of the found and fixed vulnerabilities. For a more detailed description of the problems, you can check out Canonical's security notification.

Alternatively, you can download Mozilla Firefox 32 right now from Softpedia, but this is just the binary file and users won't be able to install it, just run it. It’s also possible that some of the add-ons will stop working altogether.