rPath alert rPSA-2006-0137-1 (firefox)

From:
    	     
 
"Justin M. Forbes" <jmforbes@rpath.com>
To:
    	     
 
security-announce@lists.rpath.com, update-announce@lists.rpath.com
Subject:
    	     
 
rPSA-2006-0137-1 firefox
Date:
    	     
 
Wed, 26 Jul 2006 20:06:53 -0400
Cc:
    	     
 
full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com, lwn@lwn.net
rPath Security Advisory: 2006-0137-1
Published: 2006-07-26
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    User Deterministic Unauthorized Access
Updated Versions:
    firefox=/conary.rpath.com@rpl:devel//1/1.5.0.5-1-0.1

References:
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    https://issues.rpath.com/browse/RPL-536
    http://www.mozilla.org/security/announce/2006/mfsa2006-44...
    http://www.mozilla.org/security/announce/2006/mfsa2006-45...
    http://www.mozilla.org/security/announce/2006/mfsa2006-46...
    http://www.mozilla.org/security/announce/2006/mfsa2006-47...
    http://www.mozilla.org/security/announce/2006/mfsa2006-48...
    http://www.mozilla.org/security/announce/2006/mfsa2006-50...
    http://www.mozilla.org/security/announce/2006/mfsa2006-51...
    http://www.mozilla.org/security/announce/2006/mfsa2006-52...
    http://www.mozilla.org/security/announce/2006/mfsa2006-53...
    http://www.mozilla.org/security/announce/2006/mfsa2006-54...
    http://www.mozilla.org/security/announce/2006/mfsa2006-55...
    http://www.mozilla.org/security/announce/2006/mfsa2006-56...

Description:
    Previous versions of the firefox browser have multiple
    vulnerabilities, some of which are known to allow remote servers
    to compromise user accounts.  The firefox browser is the default
    browser on rPath Linux, and all users are strongly recommended to
    update firefox and thunderbird as soon as possible.