Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

SciLinux: Firefox Critical CVE-2009-1313 Security Issue Advisory

Calendar Apr 28, 2009 • User Avatar LinuxSecurity Advisories
2 - 4 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory software update firefox malicious content scientific linux
Critical: firefox security update 
Date: Tue, 28 Apr 2009 13:02:47 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: FASTBUGS for SL 5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

The following FASTBUGS have been uploaded to

 i386:
audispd-plugins-1.7.7-6.el5_3.2.i386.rpm
audit-1.7.7-6.el5_3.2.i386.rpm
audit-libs-1.7.7-6.el5_3.2.i386.rpm
audit-libs-devel-1.7.7-6.el5_3.2.i386.rpm
audit-libs-python-1.7.7-6.el5_3.2.i386.rpm
authd-1.4.3-14.i386.rpm
psmisc-22.2-7.i386.rpm
sqlite-3.3.6-5.i386.rpm
sqlite-devel-3.3.6-5.i386.rpm
sudo-1.6.9p17-5.el5.i386.rpm
system-config-audit-0.4.8-7.el5_3.1.i386.rpm
yum-metadata-parser-1.1.2-3.el5.i386.rpm
 x86_64:
audispd-plugins-1.7.7-6.el5_3.2.x86_64.rpm
audit-1.7.7-6.el5_3.2.x86_64.rpm
audit-libs-1.7.7-6.el5_3.2.i386.rpm
audit-libs-1.7.7-6.el5_3.2.x86_64.rpm
audit-libs-devel-1.7.7-6.el5_3.2.i386.rpm
audit-libs-devel-1.7.7-6.el5_3.2.x86_64.rpm
audit-libs-python-1.7.7-6.el5_3.2.x86_64.rpm
authd-1.4.3-14.x86_64.rpm
psmisc-22.2-7.x86_64.rpm
sqlite-3.3.6-5.i386.rpm
sqlite-3.3.6-5.x86_64.rpm
sqlite-devel-3.3.6-5.i386.rpm
sqlite-devel-3.3.6-5.x86_64.rpm
sudo-1.6.9p17-5.el5.x86_64.rpm
system-config-audit-0.4.8-7.el5_3.1.x86_64.rpm
yum-metadata-parser-1.1.2-3.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson
Date: Tue, 28 Apr 2009 13:06:00 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Critical: firefox on SL4.x, SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Critical: firefox security update
Issue date:	2009-04-27
CVE Names:	CVE-2009-1313

A flaw was found in the processing of malformed web content. A web
page containing malicious content could cause Firefox to crash or,
potentially, execute arbitrary code as the user running Firefox.
(CVE-2009-1313)

After installing the update, Firefox must be restarted for the change to
take effect.

SL 4.x

 SRPMS:
firefox-3.0.10-1.el4.src.rpm
 i386:
firefox-3.0.10-1.el4.i386.rpm
 x86_64:
firefox-3.0.10-1.el4.i386.rpm
firefox-3.0.10-1.el4.x86_64.rpm

SL 5.x

 SRPMS:
firefox-3.0.10-1.el5.src.rpm
xulrunner-1.9.0.10-1.el5.src.rpm
 i386:
firefox-3.0.10-1.el5.i386.rpm
xulrunner-1.9.0.10-1.el5.i386.rpm
xulrunner-devel-1.9.0.10-1.el5.i386.rpm
xulrunner-devel-unstable-1.9.0.10-1.el5.i386.rpm
 x86_64:
firefox-3.0.10-1.el5.i386.rpm
firefox-3.0.10-1.el5.x86_64.rpm
xulrunner-1.9.0.10-1.el5.i386.rpm
xulrunner-1.9.0.10-1.el5.x86_64.rpm
xulrunner-devel-1.9.0.10-1.el5.i386.rpm
xulrunner-devel-1.9.0.10-1.el5.x86_64.rpm
xulrunner-devel-unstable-1.9.0.10-1.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson