Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

openSUSE 11.3: 2011:0958-1 Important Mozilla Firefox Security Update

opensuse
Calendar Grey August 26, 2011
Dist Opensuse Esm H88
Fedora announces an important patch for Google Chrome 91.0.4472.114, addressing significant security vulnerabilities. Ensure your safety with the latest updates.
An update that fixes 7 vulnerabilities is now available

Description

Mozilla Firefox was updated to version 3.6.20.

It fixes bugs and security issues. Following security

issues were fixed:

https://www.mozilla.org/en-US/security/advisories/mfsa2011-30/ Mozilla Foundation Security Advisory 2011-30 (MFSA

2011-30)

* Miscellaneous memory safety hazards

Mozilla developers and community members identified and

fixed several memory safety bugs in the browser engine used

in Firefox 3.6 and other Mozilla-based products. Some of

these bugs showed evidence of memory corruption under

certain circumstances, and we presume that with enough

effort at least some of these could be exploited to run

arbitrary code.

Gary Kwong, Igor Bukanov, Nils and Bob Clary reported

memory safety issues which affected Firefox 3.6.

(CVE-2011-2982)

* Crash in SVGTextElement.getCharNumAtPosition()

Security researcher regenrecht reported via

TippingPoint's Zero Day Initiative that a SVG text

manipulation routine contained a...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.3:

zypper in -t patch MozillaFirefox-5013

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.3 (i586 x86_64) [New Version: 1.9.2.20 and 3.6.20]:

MozillaFirefox-3.6.20-0.2.1

MozillaFirefox-branding-upstream-3.6.20-0.2.1

MozillaFirefox-translations-common-3.6.20-0.2.1

MozillaFirefox-translations-other-3.6.20-0.2.1

mozilla-js192-1.9.2.20-1.2.1

mozilla-xulrunner192-1.9.2.20-1.2.1

mozilla-xulrunner192-buildsymbols-1.9.2.20-1.2.1

mozilla-xulrunner192-devel-1.9.2.20-1.2.1

mozilla-xulrunner192-gnome-1.9.2.20-1.2.1

mozilla-xulrunner192-translations-common-1.9.2.20-1.2.1

mozilla-xulrunner192-translations-other-1.9.2.20-1.2.1

- openSUSE 11.3 (x86_64) [New Version: 1.9.2.20]:

mozilla-js192-32bit-1.9.2.20-1.2.1

mozilla-xulrunner192-32bit-1.9.2.20-1.2.1

mozilla-xulrunner192-gnome-32bit-1.9.2.20-1.2.1

mozilla-xulrunner192-translations-common-32bit-1.9.2.20-1.2.1

mozilla-xulrunner192-translations-other-32bit-1.9.2.20-1.2.1

References

https://www.suse.com/security/cve/CVE-2011-0084.html

https://www.suse.com/security/cve/CVE-2011-2378.html

https://www.suse.com/security/cve/CVE-2011-2980.html

https://www.suse.com/security/cve/CVE-2011-2981.html

https://www.suse.com/security/cve/CVE-2011-2982.html

https://www.suse.com/security/cve/CVE-2011-2983.html

https://www.suse.com/security/cve/CVE-2011-2984.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2011:0958-1
Rating: important
Affected Products: openSUSE 11.3 . It includes two new package versions.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here