Описание
ELSA-2012-0387: firefox security and bug fix update (CRITICAL)
firefox:
[10.0.3-1.0.1.el6_2]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones
[10.0.3-1]
- Update to 10.0.3 ESR
xulrunner:
[10.0.3-1.0.1.el6_2]
- Replace xulrunner-redhat-default-prefs.js with
- xulrunner-oracle-default-prefs.js
[10.0.3-1]
- Update to 10.0.3 ESR
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
firefox
10.0.3-1.0.1.el5_8
xulrunner
10.0.3-1.0.1.el5_8
xulrunner-devel
10.0.3-1.0.1.el5_8
Oracle Linux x86_64
firefox
10.0.3-1.0.1.el5_8
xulrunner
10.0.3-1.0.1.el5_8
xulrunner-devel
10.0.3-1.0.1.el5_8
Oracle Linux i386
firefox
10.0.3-1.0.1.el5_8
xulrunner
10.0.3-1.0.1.el5_8
xulrunner-devel
10.0.3-1.0.1.el5_8
Oracle Linux 6
Oracle Linux x86_64
firefox
10.0.3-1.0.1.el6_2
xulrunner
10.0.3-1.0.1.el6_2
xulrunner-devel
10.0.3-1.0.1.el6_2
Oracle Linux i686
firefox
10.0.3-1.0.1.el6_2
xulrunner
10.0.3-1.0.1.el6_2
xulrunner-devel
10.0.3-1.0.1.el6_2
Ссылки на источники
Связанные уязвимости
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Fire ...