|
Fedora update for firefox
|
|
Secunia Advisory:
|
SA18708
|
|
|
Release Date:
|
2006-02-03
|
|
Popularity:
|
8,323 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Cross Site Scripting
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Fedora Core 4
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-4134
CVE-2006-0292
CVE-2006-0296
|
|
Description:
Fedora has issued an update for firefox. This fixes some vulnerabilities and a weakness, which can be exploited by malicious people to cause a DoS (Denial of Service), conduct cross-site scripting attacks, and potentially compromise a user's system.
For more information:
SA17934
SA18700
Solution:
Apply updated packages.
Fedora Core 4:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
d37a19a1ad285f0605ed0a7fc3603c289e4d33a0 SRPMS/firefox-1.0.7-1.2.fc4.src.rpm
46d0d5698126e86ce6d2e844e113d230cd4f23ea ppc/firefox-1.0.7-1.2.fc4.ppc.rpm
822405f5a6de3e18324b2a1270a0e9a08aabb234 ppc/debug/firefox-debuginfo-1.0.7-1.2.fc4.ppc.rpm
42c8d63a8dd251c505e19dfff2c61450c149c774 x86_64/firefox-1.0.7-1.2.fc4.x86_64.rpm
f737d3deb0c8791ed31caff83226d4b1a17a58d8 x86_64/debug/firefox-debuginfo-1.0.7-1.2.fc4.x86_64.rpm
c6d0a31bd2106ae7ffe65ff9c780209fa3edcd9a i386/firefox-1.0.7-1.2.fc4.i386.rpm
6635d0ddc685bb7579f2701971704a4bec7d1dc8 i386/debug/firefox-debuginfo-1.0.7-1.2.fc4.i386.rpm
Other References:
SA17934:
http://secunia.com/advisories/17934/
SA18700:
http://secunia.com/advisories/18700/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
