Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

openSUSE 12.1 & 12.2: 2013:0323-1 Important: Mozilla Security Fix

opensuse
Calendar Grey February 22, 2013
Dist Opensuse Esm H88
Crucial announcement for Fedora tackling 15 vulnerabilities linked to Chromium software made public March 2013.
An update that fixes 13 vulnerabilities is now available.

Description

MozillaFirefox was updated to Firefox 19.0 (bnc#804248)

MozillaThunderbird was updated to Thunderbird 17.0.3

(bnc#804248) seamonkey was updated to SeaMonkey 2.16

(bnc#804248) xulrunner was updated to 17.0.3esr

(bnc#804248) chmsee was updated to version 2.0.

Changes in MozillaFirefox 19.0:

* MFSA 2013-21/CVE-2013-0783/2013-0784 Miscellaneous

memory safety hazards

* MFSA 2013-22/CVE-2013-0772 (bmo#801366) Out-of-bounds

read in image rendering

* MFSA 2013-23/CVE-2013-0765 (bmo#830614) Wrapped WebIDL

objects can be wrapped again

* MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content

bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in

JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free

in nsImageLoadingContent

* MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on

HTTPS connection through malicious proxy

* MFSA...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.2:

zypper in -t patch openSUSE-2013-141

- openSUSE 12.1:

zypper in -t patch openSUSE-2013-141

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.2 (i586 x86_64):

MozillaFirefox-19.0-2.33.1

MozillaFirefox-branding-upstream-19.0-2.33.1

MozillaFirefox-buildsymbols-19.0-2.33.1

MozillaFirefox-debuginfo-19.0-2.33.1

MozillaFirefox-debugsource-19.0-2.33.1

MozillaFirefox-devel-19.0-2.33.1

MozillaFirefox-translations-common-19.0-2.33.1

MozillaFirefox-translations-other-19.0-2.33.1

MozillaThunderbird-17.0.3-49.31.1

MozillaThunderbird-buildsymbols-17.0.3-49.31.1

MozillaThunderbird-debuginfo-17.0.3-49.31.1

MozillaThunderbird-debugsource-17.0.3-49.31.1

MozillaThunderbird-devel-17.0.3-49.31.1

MozillaThunderbird-devel-debuginfo-17.0.3-49.31.1

MozillaThunderbird-translations-common-17.0.3-49.31.1

MozillaThunderbird-translations-other-17.0.3-49.31.1

chmsee-2.0-2.14.3

chmsee-debuginfo-2.0-2.14.3

chmsee-debugsource-2.0-2.14.3

enigmail-1.5.1+17.0.3-49.31.1

enigmail-debuginfo-1.5.1+17.0.3-49.31.1

mozilla-js-17.0.3-2.30.1

mozilla-js-debuginfo-17.0.3-2.30.1

seamonkey-2.16-2.34.2

seamonkey-debuginfo-2.16-2.34.2

seamonkey-debugsource-2.16-2.34.2

seamonkey-dom-inspec...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2013-0765.html

https://www.suse.com/security/cve/CVE-2013-0772.html

https://www.suse.com/security/cve/CVE-2013-0773.html

https://www.suse.com/security/cve/CVE-2013-0774.html

https://www.suse.com/security/cve/CVE-2013-0775.html

https://www.suse.com/security/cve/CVE-2013-0776.html

https://www.suse.com/security/cve/CVE-2013-0777.html

https://www.suse.com/security/cve/CVE-2013-0778.html

https://www.suse.com/security/cve/CVE-2013-0779.html

https://www.suse.com/security/cve/CVE-2013-0780.html

https://www.suse.com/security/cve/CVE-2013-0781.html

https://www.suse.com/security/cve/CVE-2013-0782.html

https://www.suse.com/security/cve/CVE-2013-0783.html

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2013:0323-1
Rating: important
Affected Products: openSUSE 12.2 openSUSE 12.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here