Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE Linux 10 SP4: SUSE-SU-2011:1266-1 Critical Update For MozillaFirefox

suse
Calendar Grey November 18, 2011
Scroller Suse
SUSE's urgent patch tackles several vulnerabilities in Google Chrome, bolstering user safety and maintaining system reliability.
An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now available

Summary

   SUSE Security Update: Security update for MozillaFirefox
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:1266-1
Rating:             critical
References:         #728520 
Cross-References:   CVE-2011-3647 CVE-2011-3648 CVE-2011-3650
                   
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SUSE Linux Enterprise Desktop 10 SP4
                    SLE SDK 10 SP4
______________________________________________________________________________

   An update that fixes three vulnerabilities is now
   available. It includes two new package versions.

Description:


   MozillaFirefox has been updated to version 3.6.24 to fix
   the following  security issues:

   * MFSA 2011-46 loadSubScript unwraps XPCNativeWrapper
   scope parameter ( CVE-2011-3647
    )
   * MFSA 2011-47 Potential XSS against sites using
   Shift-JIS ( CVE-2011-3648
    )
   * MFSA 2011-49 Memory corruption while profiling using
   Firebug ( CVE-2011-3650
    )



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.24]:

      mozilla-xulrunner192-1.9.2.24-0.5.1
      mozilla-xulrunner192-gnome-1.9.2.24-0.5.1
      mozilla-xulrunner192-translations-1.9.2.24-0.5.1

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 3.6.24]:

      MozillaFirefox-3.6.24-0.5.1
      MozillaFirefox-translations-3.6.24-0.5.1

   - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64) [New Version: 1.9.2.24]:

      mozilla-xulrunner192-32bit-1.9.2.24-0.5.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.24-0.5.1
      mozilla-xulrunner192-translations-32bit-1.9.2.24-0.5.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64) [New Version: 1.9.2.24]:

      mozilla-xulrunner192-1.9.2.24-0.5.1
      mozilla-xulrunner192-gnome-1.9.2.24-0.5.1
      mozilla-xulrunner192-translations-1.9.2.24-0.5.1

   - SUSE Linux Enterprise Desktop 10 SP4 (x86_64) [New Version: 1.9.2.24]:

      mozilla-xulrunner192-32bit-1.9.2.24-0.5.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.24-0.5.1
      mozilla-xulrunner192-translations-32bit-1.9.2.24-0.5.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 3.6.24]:

      MozillaFirefox-3.6.24-0.5.1
      MozillaFirefox-translations-3.6.24-0.5.1

   - SLE SDK 10 SP4 (i586 ia64 ppc s390x):

      MozillaFirefox-branding-upstream-3.6.24-0.5.1


References:

   https://www.suse.com/security/cve/CVE-2011-3647.html
   https://www.suse.com/security/cve/CVE-2011-3648.html
   https://www.suse.com/security/cve/CVE-2011-3650.html

Topics%20covered

Topics Covered

security advisory critical software update SUSE Linux Enterprise MozillaFirefox

References

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical software update SUSE Linux Enterprise MozillaFirefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.