Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

openSUSE 12.3: openSUSE-SU-2013:0467-1 Important: Firefox Code Execution

opensuse
Calendar Grey March 15, 2013
Dist Opensuse Esm H88
Upgrade to Mozilla Firefox 19.0.2 addresses critical vulnerabilities in openSUSE. Discover detailed guidance on the patching process.
An update that fixes one vulnerability is now available

Description

Mozilla Firefox was updated to 19.0.2 (bnc#808243) fixing:

* MFSA 2013-29/CVE-2013-0787 (bmo#848644) Use-after-free in

HTML Editor could be used for code execution

* blocklist updates

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.3:

zypper in -t patch openSUSE-2013-206

- openSUSE 12.2:

zypper in -t patch openSUSE-2013-206

- openSUSE 12.1:

zypper in -t patch openSUSE-2013-206

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.3 (i586 x86_64):

MozillaFirefox-19.0.2-1.4.1

MozillaFirefox-branding-upstream-19.0.2-1.4.1

MozillaFirefox-buildsymbols-19.0.2-1.4.1

MozillaFirefox-debuginfo-19.0.2-1.4.1

MozillaFirefox-debugsource-19.0.2-1.4.1

MozillaFirefox-devel-19.0.2-1.4.1

MozillaFirefox-translations-common-19.0.2-1.4.1

MozillaFirefox-translations-other-19.0.2-1.4.1

- openSUSE 12.2 (i586 x86_64):

MozillaFirefox-19.0.2-2.37.2

MozillaFirefox-branding-upstream-19.0.2-2.37.2

MozillaFirefox-buildsymbols-19.0.2-2.37.2

MozillaFirefox-debuginfo-19.0.2-2.37.2

MozillaFirefox-debugsource-19.0.2-2.37.2

MozillaFirefox-devel-19.0.2-2.37.2

MozillaFirefox-translations-common-19.0.2-2.37.2

MozillaFirefox-translations-other-19.0.2-2.37.2

- openSUSE 12.1 (i586 x86_64):

MozillaFirefox-19.0.2-2.66.1

MozillaFirefox-branding-upstream-19.0.2-2.66.1

MozillaFirefox-buildsymbols-19.0.2-2.66.1

MozillaFirefox-debuginfo-19.0.2-2.66.1

MozillaFirefox-debugsource-19.0.2-2.66.1

MozillaFirefox-devel-19.0.2-2.66.1

MozillaFirefox-translations-common-19.0.2-2.66....

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2013-0787.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2013:0467-1
Rating: important
Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here