|
Fedora update for firefox
|
|
Secunia Advisory:
|
SA24320
|
|
|
Release Date:
|
2007-02-28
|
|
Popularity:
|
7,156 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Fedora Core 6
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-6077
CVE-2007-0008
CVE-2007-0775
CVE-2007-0776
CVE-2007-0777
CVE-2007-0778
CVE-2007-0779
CVE-2007-0780
CVE-2007-0800
CVE-2007-0981
CVE-2007-0995
|
|
Description:
Fedora has issued an update for firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, gain knowledge of sensitive information, and potentially compromise a user's system.
For more information:
SA24205
Solution:
Apply updated packages.
81db3c1dd7816c4b1f81568eca6f711a37966746 SRPMS/firefox-1.5.0.10-1.fc6.src.rpm
81db3c1dd7816c4b1f81568eca6f711a37966746 noarch/firefox-1.5.0.10-1.fc6.src.rpm
a7e31e1ca02745429f11bb74b0db98e0e3270023 ppc/firefox-1.5.0.10-1.fc6.ppc.rpm
fde97955ffc5a75a2750ff1661908d91a1fcc35c ppc/debug/firefox-debuginfo-1.5.0.10-1.fc6.ppc.rpm
6335d97cf508c00e1bae997151b6c122c20bcd4d ppc/firefox-devel-1.5.0.10-1.fc6.ppc.rpm
13a3480928f653f107463e00b92d23be9add5f5f x86_64/debug/firefox-debuginfo-1.5.0.10-1.fc6.x86_64.rpm
f17735ee9247a0e735c47bd327972da14b78749c x86_64/firefox-devel-1.5.0.10-1.fc6.x86_64.rpm
a78c150f2b56b3faed9eb82803dc77abbe182c39 x86_64/firefox-1.5.0.10-1.fc6.x86_64.rpm
10478fed331e2e1fc31aee0c8054dd38ea189955 i386/debug/firefox-debuginfo-1.5.0.10-1.fc6.i386.rpm
0872abb77bccc7805b395f1bebd9914a8fc6b4c3 i386/firefox-devel-1.5.0.10-1.fc6.i386.rpm
1e6f2693728f293a95af4cc7d8d1ded11837e505 i386/firefox-1.5.0.10-1.fc6.i386.rpm
Original Advisory:
http://fedoranews.org/cms/node/2728
Other References:
SA24205:
http://secunia.com/advisories/24205/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
