Описание
ELSA-2010-0332: firefox security update (CRITICAL)
firefox:
[3.0.19-1.0.1.el5_5]
- Update firstrun and homepage URLs in specfile
- Added patch oracle-firefox-branding.patch
- Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding RedHat ones
[3.0.19-1]
- Update to 3.0.19
xulrunner:
[1.9.0.19-1.0.1.el5_5]
- Added xulrunner-oracle-default-prefs.js and removed the corresponding RedHat one.
[1.9.0.19-1]
- Update to 1.9.0.19
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
firefox
3.0.19-1.0.1.el5_5
xulrunner
1.9.0.19-1.0.1.el5_5
xulrunner-devel
1.9.0.19-1.0.1.el5_5
xulrunner-devel-unstable
1.9.0.19-1.0.1.el5_5
Oracle Linux x86_64
firefox
3.0.19-1.0.1.el5_5
xulrunner
1.9.0.19-1.0.1.el5_5
xulrunner-devel
1.9.0.19-1.0.1.el5_5
xulrunner-devel-unstable
1.9.0.19-1.0.1.el5_5
Oracle Linux i386
firefox
3.0.19-1.0.1.el5_5
xulrunner
1.9.0.19-1.0.1.el5_5
xulrunner-devel
1.9.0.19-1.0.1.el5_5
xulrunner-devel-unstable
1.9.0.19-1.0.1.el5_5
Ссылки на источники
Связанные уязвимости
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3. ...
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.