|
Gentoo Update for Mozilla Products
|
|
Secunia Advisory:
|
SA30327
|
|
|
Release Date:
|
2008-05-21
|
|
Popularity:
|
3,304 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Gentoo Linux 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2007-4879
CVE-2008-0304
CVE-2008-0412
CVE-2008-0413
CVE-2008-0414
CVE-2008-0415
CVE-2008-0416
CVE-2008-0417
CVE-2008-0418
CVE-2008-0419
CVE-2008-0420
CVE-2008-0591
CVE-2008-0592
CVE-2008-0593
CVE-2008-0594
CVE-2008-1233
CVE-2008-1234
CVE-2008-1235
CVE-2008-1236
CVE-2008-1237
CVE-2008-1238
CVE-2008-1240
CVE-2008-1241
CVE-2008-1380
|
|
Description:
Gentoo has issued updates for mozilla-firefox, mozilla-firefox-bin, seamonkey, seamonkey-bin, mozilla-thunderbird, mozilla-thunderbird-bin, and xulrunner. These fix some weaknesses and vulnerabilities, which can be exploited by malicious people to disclose sensitive information, conduct cross-site scripting attacks, bypass certain security restrictions, conduct spoofing attacks, or to compromise a user's system.
For more information:
SA28758
SA29133
SA29526
SA29787
Solution:
Update to a fixed version.
Mozilla Firefox users:
Update to "www-client/mozilla-firefox-2.0.0.14" or later.
Mozilla Firefox binary users:
Update to "www-client/mozilla-firefox-bin-2.0.0.14" or later.
Mozilla Thunderbird users:
Update to "mail-client/mozilla-thunderbird-2.0.0.14" or later.
Mozilla Thunderbird binary users:
Update to "mail-client/mozilla-thunderbird-bin-2.0.0.14" or later.
SeaMonkey users:
Update to "www-client/seamonkey-1.1.9-r1" or later.
SeaMonkey binary users:
Update to "www-client/seamonkey-bin-1.1.9" or later.
XULRunner users:
Update to "net-libs/xulrunner-1.8.1.14" or later.
Original Advisory:
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
Other References:
SA28758:
http://secunia.com/advisories/28758/
SA29133:
http://secunia.com/advisories/29133/
SA29526:
http://secunia.com/advisories/29526/
SA29787:
http://secunia.com/advisories/29787/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
