rPath update for firefox and thunderbird - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

rPath update for firefox and thunderbird

Secunia Advisory:	SA27403
Release Date:	2007-10-29
Last Update:	2007-11-01

Critical:	Highly critical
Impact:	Spoofing Manipulation of data Exposure of sensitive information DoS System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	rPath Linux 1.x


CVE reference:	CVE-2006-2894 (Secunia mirror) CVE-2007-1095 (Secunia mirror) CVE-2007-2292 (Secunia mirror) CVE-2007-3511 (Secunia mirror) CVE-2007-5334 (Secunia mirror) CVE-2007-5337 (Secunia mirror) CVE-2007-5338 (Secunia mirror) CVE-2007-5339 (Secunia mirror) CVE-2007-5340 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: rPath has issued an update for firefox and thunderbird. This fixes some vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct phishing attacks, manipulate certain data, and compromise a user's system. For more information: SA20442 SA25904 SA27311 Solution: Update to: firefox=conary.rpath.com at rpl:1/2.0.0.8-0.2-1 thunderbird=conary.rpath.com at rpl:1/2.0.0.6-0.2-1 Changelog: 2007-10-30: Updated advisory to include information about updated thunderbird package. Added link to updated rPath advisory. 2007-11-01: Updated advisory to include information about updated firefox package due to incorrect file permission. Added link to updated rPath advisory. Original Advisory: http://lists.rpath.com/pipermail/security-announce/2007-October/000270.html http://lists.rpath.com/pipermail/security-announce/2007-October/000271.html http://lists.rpath.com/pipermail/security-announce/2007-October/000272.html Other References: SA20442: http://secunia.com/advisories/20442/ SA25904: http://secunia.com/advisories/25904/ SA27311: http://secunia.com/advisories/27311/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

252 Related Secunia Security Advisories, displaying 10

1. rPath update for wireshark

2. rPath update for tshark

3. rPath update for kernel

4. rPath update for ruby

5. rPath update for xorg-x11

6. rPath update for kernel

7. rPath update for evolution

8. rPath update for samba

9. rPath update for evolution

10. rPath update for php

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Microsoft Windows DNS Spoofing Vulnerabilities

2.	Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

3.	Microsoft Windows Explorer Saved Search Vulnerability

4.	Microsoft SQL Server and MSDE Multiple Vulnerabilities

5.	Joomla Unauthorized Access Vulnerabilities

6.	Microsoft Outlook Web Access Script Insertion Vulnerabilities

7.	ArticleBeach Script "page" File Inclusion Vulnerability

8.	Poppler "pageWidgets" Uninitialized Memory Access

9.	Joomla Brightcode Weblinks Component "catid" SQL Injection

10.	webXell Editor File Upload Vulnerability