Описание
ELSA-2012-1407: firefox security update (CRITICAL)
firefox [10.0.10-1.0.1.el6_3]
- Replaced firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js
[10.0.10-1]
- Update to 10.0.10 ESR
[10.0.8-2]
- Fixed rhbz#865284 - add the storage.nfs_filesystem config key to property list
- disable OOP for wrapped plugins (nspluginwrapper)
xulrunner [10.0.10-1.0.1.el6_3]
- Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
[10.0.10-1]
- Added patches from 10.0.10 ESR
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
firefox
10.0.10-1.0.1.el5_8
xulrunner
10.0.10-1.0.1.el5_8
xulrunner-devel
10.0.10-1.0.1.el5_8
Oracle Linux x86_64
firefox
10.0.10-1.0.1.el5_8
xulrunner
10.0.10-1.0.1.el5_8
xulrunner-devel
10.0.10-1.0.1.el5_8
Oracle Linux i386
firefox
10.0.10-1.0.1.el5_8
xulrunner
10.0.10-1.0.1.el5_8
xulrunner-devel
10.0.10-1.0.1.el5_8
Oracle Linux 6
Oracle Linux x86_64
firefox
10.0.10-1.0.1.el6_3
xulrunner
10.0.10-1.0.1.el6_3
xulrunner-devel
10.0.10-1.0.1.el6_3
Oracle Linux i686
firefox
10.0.10-1.0.1.el6_3
xulrunner
10.0.10-1.0.1.el6_3
xulrunner-devel
10.0.10-1.0.1.el6_3
Связанные CVE
Связанные уязвимости
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Fi ...