Fedora 9 Security Update: xulrunner-1.9.0.1-1.fc9,firefox-3.0.1-1.fc9,epiphany-2.22.2-3.fc9,epiphany-extensions-2.22.1-3.fc9,yelp-2.22.1-4.fc9,devhelp-0.19.1-3.fc9

Submitted by chantra on Fri, 07/18/2008 - 02:38

Resolved Bugs452204 - CVE-2008-2785 mozilla: CSS reference counter overflow (ZDI-CAN-349)454697 - CVE-2008-2933 Firefox command line URL launches multi-tabsUpdated firefox packages that fix several security issues are now available for Fedora 9.
An integer overflow flaw was found in the way Firefox displayed certain web content. A malicious web site could cause Firefox to crash, or execute arbitrary code with the permissions of the user running Firefox. (CVE-2008-2785)
A flaw was found in the way Firefox handled certain command line URLs. If another application passed Firefox a malformed URL, it could result in Firefox executing local malicious content with chrome privileges. (CVE-2008-2933)
Updated packages update Mozilla Firefox to upstream version 3.0.1 to address these flaws:
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#fir...
This update also contains devhelp, epiphany, epiphany-extensions, and yelp packages rebuilt against new Firefox / Gecko libraries.

Bookmark/Search this post with: