Stay Secure with the Latest Linux Advisories

security advisoryFedoraMozilla

Fedora 9: 2009-3099 Critical Vulnerabilities Found in Firefox Memory Issues

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044) This update also provides depending packages rebuilt against new Firefox version. Miro updates to upstream 2.0.3. Provides new features and fixes various bugs in 1.2.x series. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-3099 2009-03-28 00:57:36 --------------------------------------------------------------------------------Name : totem Product : Fedora 9 Version : 2.23.2 Release : 13.fc9 URL : https://wiki.gnome.org/Apps Summary : Movie player for GNOME Description : Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation. --------------------------------------------------------------------------------Update Information: Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary codeas the user running Firefox. (CVE-2009-1044) This update also provides depending packages rebuilt against new Firefox version. Miro updates to upstream 2.0.3. Provides new features and fixes various bugs in 1.2.x series --------------------------------------------------------------------------------ChangeLog: * Fri Mar 27 2009 Christopher Aillon - 2.23.2-13 - Rebuild against newer gecko * Fri Mar 6 2009 Christopher Aillon - 2.23.2-12 - BuildRequire: gail-devel evolution-data-server-devel * Fri Mar 6 2009 Jan Horak - 2.23.2-11 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 2.23.2-10 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 2.23.2-9 - Rebuild against newer gecko * Wed Nov 12 2008 Christopher Aillon - 2.23.2-8 - Rebuild against newer gecko * Wed Sep 24 2008 Christopher Aillon - 2.23.2-7 - Rebuild against newer gecko * Fri Jul 25 2008 - Bastien Nocera - 2.23.2-6 - Add patch to make FLV videos thumbnail (#449279) * Fri Jul 18 2008 Martin Stransky - 2.23.2-5 - Rebuild against xulrunner 1.9.0.1 and fixed gecko dependency * Wed Jun 18 2008 Owen Taylor - 2.23.2-4 - Rebuild against xulrunner 1.9 final * Wed May 7 2008 - Bastien Nocera - 2.23.2-3 - Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD playback bits --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update totem' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . This patch resolves significant security vulnerabilities in Chrome impacting Ubuntu 20.04. Prompt measures are advised for all users.. memory flaws, Firefox update, Fedora advisory, XULRunner fix. . Severity: Critical. LinuxSecurity.com Team

Mar 28, 2009 •Critical Fedora