full-disclosure - rPSA-2006-0091-1 firefox thunderbird

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200606021914.k52JEpor015054@lambchop.rdu.rpath.com>
Date: Fri Jun  2 20:15:07 2006
From: jmforbes at rpath.com (Justin M. Forbes)
Subject: rPSA-2006-0091-1 firefox thunderbird

rPath Security Advisory: 2006-0091-1
Published: 2006-06-02
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    Local User Deterministic Vulnerability
Updated Versions:
    firefox=/conary.rpath.com@rpl:devel//1/1.5.0.4-1-0.1
    thunderbird=/conary.rpath.com@rpl:devel//1/1.5.0.4-1-0.1

References:
    http://issues.rpath.com/browse/RPL-398
    http://issues.rpath.com/browse/RPL-341
    http://www.mozilla.com/firefox/releases/1.5.0.4.html
    http://www.mozilla.com/thunderbird/releases/1.5.0.4.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-31.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-32.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-33.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-34.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-35.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-36.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-37.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-38.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-39.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-40.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-41.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-42.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-43.html

Description:
    Previous versions of the firefox browser and thunderbird mail user
    agent have multiple vulnerabilities, some of which allow remote
    servers to compromise user accounts.  The firefox browser is the
    default browser on rPath Linux, and all users are strongly recommended
    to update firefox and thunderbird as soon as possible.