Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 10 FEDORA-2009-3885 Important: Firefox Browser Enhancement

fedora
Calendar Grey April 23, 2009
Dist Fedora Esm H88
New release for Fedora 9 addresses problems within the Finnish spell-checking add-on for Mozilla. Immediate security warning!
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/

Summary

This is mozvoikko, an extension for Mozilla programs for using the Finnish

spell-checker Voikko.

Update Information:

https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/

Change Log

References


[ 1 ] Bug #496252 - CVE-2009-1302 Firefox 3 Layout engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496252 [ 2 ] Bug #496253 - CVE-2009-1303 Firefox 2 and 3 Layout engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496253 [ 3 ] Bug #496255 - CVE-2009-1304 Firefox 3 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496255 [ 4 ] Bug #496256 - CVE-2009-1305 Firefox 2 and 3 JavaScript engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496256 [ 5 ] Bug #486704 - CVE-2009-0652 firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks) https://bugzilla.redhat.com/show_bug.cgi?id=486704 [ 6 ] Bug #496262 - CVE-2009-1306 Firefox jar: scheme ignores the content-disposition: header on the inner URI https://bugzilla.redhat.com/show_bug.cgi?id=496262 [ 7 ] Bug #496263 - CVE-2009-1307 Firefox Same-origin violati...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mozvoikko' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: mozvoikko
Product: Fedora 9
Version: 0.9.5
Release: 9.fc9
Summary: Finnish Voikko spell-checker extension for Mozilla programs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here