full-disclosure - rPSA-2006-0091-1 firefox thunderbird

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [month] [year] [list]

Date: Fri Jun  2 20:15:07 2006
From: jmforbes at rpath.com (Justin M. Forbes)
Subject: rPSA-2006-0091-1 firefox thunderbird

rPath Security Advisory: 2006-0091-1
Published: 2006-06-02
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    Local User Deterministic Vulnerability
Updated Versions:
    firefox=/conary.rpath.com@...:devel//1/1.5.0.4-1-0.1
    thunderbird=/conary.rpath.com@...:devel//1/1.5.0.4-1-0.1

References:
    http://issues.rpath.com/browse/RPL-398
    http://issues.rpath.com/browse/RPL-341
    http://www.mozilla.com/firefox/releases/1.5.0.4.html
    http://www.mozilla.com/thunderbird/releases/1.5.0.4.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-31.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-32.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-33.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-34.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-35.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-36.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-37.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-38.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-39.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-40.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-41.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-42.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-43.html

Description:
    Previous versions of the firefox browser and thunderbird mail user
    agent have multiple vulnerabilities, some of which allow remote
    servers to compromise user accounts.  The firefox browser is the
    default browser on rPath Linux, and all users are strongly recommended
    to update firefox and thunderbird as soon as possible.