Oval Definition:	oval:com.redhat.rhsa:def:20121407
Revision Date: 2012-10-26 Version: 635 Title: RHSA-2012:1407: firefox security update (Critical) Description: Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Multiple flaws were found in the location object implementation in Firefox. Malicious content could be used to perform cross-site scripting attacks, bypass the same-origin policy, or cause Firefox to execute arbitrary code. (CVE-2012-4194, CVE-2012-4195, CVE-2012-4196) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 10.0.10 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mariusz Mlynski, moz_bug_r_a4, and Antoine Delignat-Lavaud as the original reporters of these issues. All Firefox users should upgrade to these updated packages, which contain Firefox version 10.0.10 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect. Family: unix Class: patch Status: Reference(s): CVE-2012-4194 CVE-2012-4194 CVE-2012-4195 CVE-2012-4195 CVE-2012-4196 CVE-2012-4196 RHSA-2012:1407 RHSA-2012:1407-01 RHSA-2012:1407-01 Platform(s): Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 5 is installed AND xulrunner is earlier than 0:10.0.10-1.el5_8 AND xulrunner is signed with Red Hat redhatrelease2 key xulrunner-devel is earlier than 0:10.0.10-1.el5_8 AND xulrunner-devel is signed with Red Hat redhatrelease2 key firefox is earlier than 0:10.0.10-1.el5_8 AND firefox is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 6 is installed AND xulrunner is earlier than 0:10.0.10-1.el6_3 AND xulrunner is signed with Red Hat redhatrelease2 key xulrunner-devel is earlier than 0:10.0.10-1.el6_3 AND xulrunner-devel is signed with Red Hat redhatrelease2 key firefox is earlier than 0:10.0.10-1.el6_3 AND firefox is signed with Red Hat redhatrelease2 key
BACK