Fedora: FEDORA-2005-874 Critical: Mozilla HTML Processing Issue

Mozilla is an open-source Web browser, designed for standards

compliance, performance, and portability.

An updated mozilla package that fixes a security bug is now

available for Fedora Core 3.

This update has been rated as having critical security

impact by the Fedora Security Response Team.

Mozilla is an open source Web browser, advanced email and

newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain

international domain names. An attacker could create a

specially crafted HTML file, which when viewed by the victim

would cause Mozilla to crash or possibly execute arbitrary

code. The Common Vulnerabilities and Exposures project

(cve.mitre.org) has assigned the name CAN-2005-2871 to this

issue.

Users of Mozilla are advised to upgrade to this updated

package that contains a backported patch and is not

vulnerable to this issue.

- Fix for CAN-2005-2871

06e17c6028502048323b02d7ff9d59b4 SRPMS/mozilla-1.7.10-1.3.2.src.rpm

b4d8302d016bb81af7f9bb5939c055d0 x86_64/mozilla-1.7.10-1.3.2.x86_64.rpm

424742831025ce3e0d17cef8324b7f41 x86_64/mozilla-nspr-1.7.10-1.3.2.x86_64.rpm

9a7ef782f2b60d6bc78e3545bc3a5e6c x86_64/mozilla-nspr-devel-1.7.10-1.3.2.x86_64.rpm

53f99acae7525c07dded462523144e0a x86_64/mozilla-nss-1.7.10-1.3.2.x86_64.rpm

97472852f74cf09a6a8407e7e3f731f6 x86_64/mozilla-nss-devel-1.7.10-1.3.2.x86_64.rpm

8eddea5ce7d9d47a4c7f5eefb2ef2ae2 x86_64/mozilla-devel-1.7.10-1.3.2.x86_64.rpm

d6a3168a04fa5983eb864bc4c61cf1ad x86_64/mozilla-mail-1.7.10-1.3.2.x86_64.rpm

83cd83387e54efa1d5fef4cd038c4d2d x86_64/mozilla-chat-1.7.10-1.3.2.x86_64.rpm

9d8cb41a1d46f8ce4b252c3df531aa1e x86_64/mozilla-js-debugger-1.7.10-1.3.2.x86_64.rpm

658f1bb2368431e44be3fe50db19ec5d x86_64/mozilla-dom-inspector-1.7.10-1.3.2.x86_64.rpm

c2afc4080cca4a45fbe42b74cbfe69f8 x86_64/debug/mozilla-debuginfo-1.7.10-1.3.2.x86_64.rpm

194e0ef4b161387897729d7edef996df x86_64/mozilla-nspr-1.7.10-1.3.2.i386.rpm

e08421fc25692f832b7044bcf0101f73 x86_64/mozilla-nss-1.7.10-1.3.2.i386.rpm

6514c4e91521e86fed53128b267673c7 i386/mozilla-1.7.10-1.3.2.i386.rpm

194e0ef4b161387897729d7edef996df i386/mozilla-nspr-1.7.10-1.3.2.i386.rpm

b3d721c87a275315f46ad4bcd2910e0e i386/mozilla-nspr-devel-1.7.10-1.3.2.i386.rpm

e08421fc25692f832b7044bcf0101f73 i386/mozilla-nss-1.7.10-1.3.2.i386.rpm

f02f5be7053f9806f64bd42f3193cfc9 i386/mozilla-nss-devel-1.7.10-1.3.2.i386.rpm

e9183d1ef57b9999980de318fae7be68 i386/mozilla-devel-1.7.10-1.3.2.i386.rpm

d499b6e6170033ec28fa2cd9b6548fb6 i386/mozilla-mail-1.7.10-1.3.2.i386.rpm

d469f6a420bbc48448eabb3892d16e42 i386/mozilla-chat-1.7.10-1.3.2.i386.rpm

0d0e1ad6a15156da6ec62da999de5eed i386/mozilla-js-debugger-1.7.10-1.3.2.i386.rpm

39c8d0d976d87d86bed44b1136ec1272 i386/mozilla-dom-inspector-1.7.10-1.3.2.i386.rpm

c7a91e7aca4db4452c25cc7e2389c4fb i386/debug/mozilla-debuginfo-1.7.10-1.3.2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list

fedora-announce-list@redhat.com