openSUSE 11.4: 2011:1076-1 Important: Mozilla XULRunner Security Fix

Mozilla XULRunner was updated to version 1.9.2.23, fixing

various bugs and security issues.

MFSA 2011-36: Mozilla developers identified and fixed

several memory safety bugs in the browser engine used in

Firefox and other Mozilla-based products. Some of these

bugs showed evidence of memory corruption under certain

circumstances, and we presume that with enough effort at

least some of these could be exploited to run arbitrary

code.

In general these flaws cannot be exploited through email in

the Thunderbird and SeaMonkey products because scripting is

disabled,, but are potentially a risk in browser or

browser-like contexts in those products.

Benjamin Smedberg, Bob Clary, and Jesse Ruderman reported

memory safety problems that affected Firefox 3.6 and

Firefox 6. (CVE-2011-2995)

Josh Aas reported a potential crash in the plugin API that

affected Firefox 3.6 only. (CVE-2011-2996)

MFSA 2011-37: Mark Kaplan reported a potentially

...