Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 10 Firefox Update: Critical Security Improvements

fedora
Calendar Grey July 23, 2009
Scroller Fedora
Numerous vulnerabilities have been resolved in the latest Firefox update, version 3.0.12, which also includes enhancements to the gecko-sharp components.
Update to new upstream Firefox version 3.0.12, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities...

Summary

This package provides Mono bindings for the Gecko engine, through

an easy-to-use widget that will allow you to embed a Mozilla

browser window into your Gtk# application.

Update Information:

Update to new upstream Firefox version 3.0.12, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

Topics%20covered

Topics Covered

security advisory critical Fedora remote execution Firefox crash gecko-sharp

Change Log

* Tue Jul 21 2009 Jan Horak - 0.13-10 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 0.13-9 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 0.13-8 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 0.13-7 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 0.13-6 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 0.13-5 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 0.13-4 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 0.13-3 - Rebuild against newer gecko

References


[ 1 ] Bug #512131 - CVE-2009-2463 Mozilla Base64 decoding crash https://bugzilla.redhat.com/show_bug.cgi?id=512131 [ 2 ] Bug #512133 - CVE-2009-2464 Mozilla crash with multiple RDFs in XUL tree https://bugzilla.redhat.com/show_bug.cgi?id=512133 [ 3 ] Bug #512135 - CVE-2009-2465 Mozilla double frame construction crashes https://bugzilla.redhat.com/show_bug.cgi?id=512135 [ 4 ] Bug #512128 - CVE-2009-2462 Mozilla Browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=512128 [ 5 ] Bug #512136 - CVE-2009-2466 Mozilla JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=512136 [ 6 ] Bug #512137 - CVE-2009-2467 Mozilla remote code execution during Flash player unloading https://bugzilla.redhat.com/show_bug.cgi?id=512137 [ 7 ] Bug #512142 - CVE-2009-2469 Mozilla remote code execution using watch and __defineSetter__ on SVG element https://bugzilla.redhat.com/show_bug.cgi?id=512142 [ 8 ] Bug ...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update gecko-sharp2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gecko-sharp2
Product: Fedora 10
Version: 0.13
Release: 10.fc10
URL: https://www.mono-project.com/
Summary: Gecko bindings for Mono

Topics%20covered

Topics Covered

security advisory critical Fedora remote execution Firefox crash gecko-sharp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.