| Description: | Description:
The remote host is missing an update to gnome-python2-extras
announced via advisory FEDORA-2009-13366.
Update Information:
Update to new upstream Firefox version 3.5.6, fixing multiple security issues
detailed in the upstream advisories:
http://www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.6
Update also includes all packages depending on gecko-libs rebuilt against
new version of Firefox / XULRunner.
ChangeLog:
* Wed Dec 16 2009 Jan Horak - 2.25.3-14
- Rebuild against newer gecko
References:
[ 1 ] Bug #546694 - CVE-2009-3979 Mozilla crash with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=546694
[ 2 ] Bug #546720 - CVE-2009-3983 Mozilla NTLM reflection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=546720
[ 3 ] Bug #546722 - CVE-2009-3984 Mozilla SSL spoofing with document.location and empty SSL response page
https://bugzilla.redhat.com/show_bug.cgi?id=546722
[ 4 ] Bug #546726 - CVE-2009-3985 Mozilla URL spoofing via invalid document.location
https://bugzilla.redhat.com/show_bug.cgi?id=546726
[ 5 ] Bug #546724 - CVE-2009-3986 Mozilla Chrome privilege escalation via window.opener
https://bugzilla.redhat.com/show_bug.cgi?id=546724
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update gnome-python2-extras' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-13366
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
