rPath alert rPSA-2007-0040-1 (firefox)

From:
    	     
 
rPath Update Announcements <announce-noreply@rpath.com>
To:
    	     
 
security-announce@lists.rpath.com, update-announce@lists.rpath.com
Subject:
    	     
 
rPSA-2007-0040-1 firefox
Date:
    	     
 
Mon, 26 Feb 2007 14:06:35 -0500
Cc:
    	     
 
full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com, lwn@lwn.net
rPath Security Advisory: 2007-0040-1
Published: 2007-02-26
Products: rPath Linux 1
Rating: Severe
Exposure Level Classification:
    Indirect User Deterministic Unauthorized Access
Updated Versions:
    firefox=/conary.rpath.com@rpl:devel//1/1.5.0.10-0.1-1

References:
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200... CVE-2007-0008
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200... CVE-2007-0778
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
    https://issues.rpath.com/browse/RPL-1081

Description:
    Previous versions of the firefox package are vulnerable to several
    types of attacks, some of which are understood to allow compromised
    or malicious sites to run arbitrary code as the user running the
    firefox browser.