BugTraq
[ MDVSA-2010:213 ] xulrunner Oct 28 2010 01:23PM
security mandriva com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2010:213
http://www.mandriva.com/security/
_______________________________________________________________________

Package : xulrunner
Date : October 28, 2010
Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability was discovered and corrected in xulrunner:

Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.14
and 3.6.x through 3.6.11, when JavaScript is enabled, allows remote
attackers to execute arbitrary code via unknown vectors, as exploited
in the wild in October 2010 by the Belmoo malware (CVE-2010-3765).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2009.0:
7101153acd66111da72df4d8582b68a0 2009.0/i586/libxulrunner1.9.2.11-1.9.2.11-0.2mdv2009.0.i586.rpm
bb7724ae83aa51dcff03577e159fd463 2009.0/i586/libxulrunner-devel-1.9.2.11-0.2mdv2009.0.i586.rpm
d42fccf9cc40ba8d18b140f0a02fabd0 2009.0/i586/xulrunner-1.9.2.11-0.2mdv2009.0.i586.rpm
466b75ef822c9bfd2cb3dc76eef6da53 2009.0/SRPMS/xulrunner-1.9.2.11-0.2mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
5d5d4987963b7acaaab20c8e9c24787b 2009.0/x86_64/lib64xulrunner1.9.2.11-1.9.2.11-0.2mdv2009.0.x86_64.rpm
c570198c0797ad3b6059f6ed21b74016 2009.0/x86_64/lib64xulrunner-devel-1.9.2.11-0.2mdv2009.0.x86_64.rpm
53ce3c82744822bdf7d1b1d7378d420a 2009.0/x86_64/xulrunner-1.9.2.11-0.2mdv2009.0.x86_64.rpm
466b75ef822c9bfd2cb3dc76eef6da53 2009.0/SRPMS/xulrunner-1.9.2.11-0.2mdv2009.0.src.rpm

Mandriva Linux 2010.0:
525e94891b81e7773f98c21fdbd32567 2010.0/i586/libxulrunner1.9.2.11-1.9.2.11-0.2mdv2010.0.i586.rpm
dfa0583ea59506e1b6b5a751edf2bae2 2010.0/i586/libxulrunner-devel-1.9.2.11-0.2mdv2010.0.i586.rpm
1c76b4131e88bf4f8bed182bd785915c 2010.0/i586/xulrunner-1.9.2.11-0.2mdv2010.0.i586.rpm
018afadac0f3edd3d42c3149d0523332 2010.0/SRPMS/xulrunner-1.9.2.11-0.2mdv2010.0.src.rpm

Mandriva Linux 2010.0/X86_64:
ce448c21759284c754923f77313b16c1 2010.0/x86_64/lib64xulrunner1.9.2.11-1.9.2.11-0.2mdv2010.0.x86_64.rpm
f4287d26a1f1fe5864b72b7691494d67 2010.0/x86_64/lib64xulrunner-devel-1.9.2.11-0.2mdv2010.0.x86_64.rpm
61c8d46cab1c9f0567af9d3e1ad05002 2010.0/x86_64/xulrunner-1.9.2.11-0.2mdv2010.0.x86_64.rpm
018afadac0f3edd3d42c3149d0523332 2010.0/SRPMS/xulrunner-1.9.2.11-0.2mdv2010.0.src.rpm

Mandriva Linux 2010.1:
a026e31f79811179200cb96e258b1832 2010.1/i586/libxulrunner1.9.2.11-1.9.2.11-0.2mdv2010.1.i586.rpm
403a9bc17217470b8780a93d582c0abc 2010.1/i586/libxulrunner-devel-1.9.2.11-0.2mdv2010.1.i586.rpm
c85c056f1ce7c5520b60ffccbee41f7d 2010.1/i586/xulrunner-1.9.2.11-0.2mdv2010.1.i586.rpm
a6f746d7949da935ba5237d0f9f9f0aa 2010.1/SRPMS/xulrunner-1.9.2.11-0.2mdv2010.1.src.rpm

Mandriva Linux 2010.1/X86_64:
0200b2510106c17d479858ed50de1889 2010.1/x86_64/lib64xulrunner1.9.2.11-1.9.2.11-0.2mdv2010.1.x86_64.rpm
f9ae126654f6d8326b9d59bb2e6861a7 2010.1/x86_64/lib64xulrunner-devel-1.9.2.11-0.2mdv2010.1.x86_64.rpm
9057a6d7bb740ffac5b56ac41ac75b18 2010.1/x86_64/xulrunner-1.9.2.11-0.2mdv2010.1.x86_64.rpm
a6f746d7949da935ba5237d0f9f9f0aa 2010.1/SRPMS/xulrunner-1.9.2.11-0.2mdv2010.1.src.rpm

Mandriva Enterprise Server 5:
345cb1ed93d63d143dbb4d5e578f5ef5 mes5/i586/libxulrunner1.9.2.11-1.9.2.11-0.2mdvmes5.1.i586.rpm
dbe75eb7ea67d131f166a8a015597810 mes5/i586/libxulrunner-devel-1.9.2.11-0.2mdvmes5.1.i586.rpm
f9ffe89fdc1fda5e18300b64dd3292de mes5/i586/xulrunner-1.9.2.11-0.2mdvmes5.1.i586.rpm
1f35554e93457f361788226226736561 mes5/SRPMS/xulrunner-1.9.2.11-0.2mdvmes5.1.src.rpm

Mandriva Enterprise Server 5/X86_64:
200429fa806a1886648736ebfb8d4b5c mes5/x86_64/lib64xulrunner1.9.2.11-1.9.2.11-0.2mdvmes5.1.x86_64.rpm
a8561066847eefe19c030dfc5be1398e mes5/x86_64/lib64xulrunner-devel-1.9.2.11-0.2mdvmes5.1.x86_64.rpm
d038e33c018054a3d87fb05491542186 mes5/x86_64/xulrunner-1.9.2.11-0.2mdvmes5.1.x86_64.rpm
1f35554e93457f361788226226736561 mes5/SRPMS/xulrunner-1.9.2.11-0.2mdvmes5.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFMyUnfmqjQ0CJFipgRAhriAJ9kIYyrHAuVgWvXk8na3nROWEaeNQCfZN+1
6V005lDu4wEvbruVt4OC/e8=
=Gwvm
-----END PGP SIGNATURE-----

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus