Mageia alert MGASA-2013-0093 (firefox, thunderbird)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2013-0093: thunderbird,
 thunderbird-l10n,firefox, firefox-l10n (2/core) 
Date:
    	     
 
Sat, 16 Mar 2013 02:36:10 +0100
Message-ID:
    	     
 
<20130316013610.GA11062@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2013-0093

Date:	March 15rd, 2013
Affected releases:	2
Media:	Core

Description:
Use-after-free vulnerability in the nsEditor::IsPreformatted function 
in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, 
Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird
ESR  17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers
to  execute arbitrary code via vectors involving an execCommand call.

The firefox, firefox-l10n, thunderbird, thunderbird-l10n packages have
been updated  to fix above CVE-2013-0787.

Updated Packages:
i586:
firefox-17.0.4-1.mga2.i586.rpm
firefox-devel-17.0.4-1.mga2.i586.rpm
firefox-debug-17.0.4-1.mga2.i586.rpm
firefox-af-17.0.4-1.mga2.noarch.rpm
firefox-ar-17.0.4-1.mga2.noarch.rpm
firefox-ast-17.0.4-1.mga2.noarch.rpm
firefox-be-17.0.4-1.mga2.noarch.rpm
firefox-bg-17.0.4-1.mga2.noarch.rpm
firefox-bn_BD-17.0.4-1.mga2.noarch.rpm
firefox-bn_IN-17.0.4-1.mga2.noarch.rpm
firefox-br-17.0.4-1.mga2.noarch.rpm
firefox-bs-17.0.4-1.mga2.noarch.rpm
firefox-ca-17.0.4-1.mga2.noarch.rpm
firefox-cs-17.0.4-1.mga2.noarch.rpm
firefox-cy-17.0.4-1.mga2.noarch.rpm
firefox-da-17.0.4-1.mga2.noarch.rpm
firefox-de-17.0.4-1.mga2.noarch.rpm
firefox-el-17.0.4-1.mga2.noarch.rpm
firefox-en_GB-17.0.4-1.mga2.noarch.rpm
firefox-en_ZA-17.0.4-1.mga2.noarch.rpm
firefox-eo-17.0.4-1.mga2.noarch.rpm
firefox-es_AR-17.0.4-1.mga2.noarch.rpm
firefox-es_CL-17.0.4-1.mga2.noarch.rpm
firefox-es_ES-17.0.4-1.mga2.noarch.rpm
firefox-es_MX-17.0.4-1.mga2.noarch.rpm
firefox-et-17.0.4-1.mga2.noarch.rpm
firefox-eu-17.0.4-1.mga2.noarch.rpm
firefox-fa-17.0.4-1.mga2.noarch.rpm
firefox-fi-17.0.4-1.mga2.noarch.rpm
firefox-fr-17.0.4-1.mga2.noarch.rpm
firefox-fy-17.0.4-1.mga2.noarch.rpm
firefox-ga_IE-17.0.4-1.mga2.noarch.rpm
firefox-gd-17.0.4-1.mga2.noarch.rpm
firefox-gl-17.0.4-1.mga2.noarch.rpm
firefox-gu_IN-17.0.4-1.mga2.noarch.rpm
firefox-he-17.0.4-1.mga2.noarch.rpm
firefox-hi-17.0.4-1.mga2.noarch.rpm
firefox-hr-17.0.4-1.mga2.noarch.rpm
firefox-hu-17.0.4-1.mga2.noarch.rpm
firefox-hy-17.0.4-1.mga2.noarch.rpm
firefox-id-17.0.4-1.mga2.noarch.rpm
firefox-is-17.0.4-1.mga2.noarch.rpm
firefox-it-17.0.4-1.mga2.noarch.rpm
firefox-ja-17.0.4-1.mga2.noarch.rpm
firefox-kk-17.0.4-1.mga2.noarch.rpm
firefox-kn-17.0.4-1.mga2.noarch.rpm
firefox-ko-17.0.4-1.mga2.noarch.rpm
firefox-ku-17.0.4-1.mga2.noarch.rpm
firefox-lg-17.0.4-1.mga2.noarch.rpm
firefox-lt-17.0.4-1.mga2.noarch.rpm
firefox-lv-17.0.4-1.mga2.noarch.rpm
firefox-mai-17.0.4-1.mga2.noarch.rpm
firefox-mk-17.0.4-1.mga2.noarch.rpm
firefox-ml-17.0.4-1.mga2.noarch.rpm
firefox-mr-17.0.4-1.mga2.noarch.rpm
firefox-nb_NO-17.0.4-1.mga2.noarch.rpm
firefox-nl-17.0.4-1.mga2.noarch.rpm
firefox-nn_NO-17.0.4-1.mga2.noarch.rpm
firefox-nso-17.0.4-1.mga2.noarch.rpm
firefox-or-17.0.4-1.mga2.noarch.rpm
firefox-pa_IN-17.0.4-1.mga2.noarch.rpm
firefox-pl-17.0.4-1.mga2.noarch.rpm
firefox-pt_BR-17.0.4-1.mga2.noarch.rpm
firefox-pt_PT-17.0.4-1.mga2.noarch.rpm
firefox-ro-17.0.4-1.mga2.noarch.rpm
firefox-ru-17.0.4-1.mga2.noarch.rpm
firefox-si-17.0.4-1.mga2.noarch.rpm
firefox-sk-17.0.4-1.mga2.noarch.rpm
firefox-sl-17.0.4-1.mga2.noarch.rpm
firefox-sq-17.0.4-1.mga2.noarch.rpm
firefox-sr-17.0.4-1.mga2.noarch.rpm
firefox-sv_SE-17.0.4-1.mga2.noarch.rpm
firefox-ta-17.0.4-1.mga2.noarch.rpm
firefox-ta_LK-17.0.4-1.mga2.noarch.rpm
firefox-te-17.0.4-1.mga2.noarch.rpm
firefox-th-17.0.4-1.mga2.noarch.rpm
firefox-tr-17.0.4-1.mga2.noarch.rpm
firefox-uk-17.0.4-1.mga2.noarch.rpm
firefox-vi-17.0.4-1.mga2.noarch.rpm
firefox-zh_CN-17.0.4-1.mga2.noarch.rpm
firefox-zh_TW-17.0.4-1.mga2.noarch.rpm
firefox-zu-17.0.4-1.mga2.noarch.rpm
thunderbird-ar-17.0.4-1.mga2.noarch.rpm
thunderbird-ast-17.0.4-1.mga2.noarch.rpm
thunderbird-be-17.0.4-1.mga2.noarch.rpm
thunderbird-bg-17.0.4-1.mga2.noarch.rpm
thunderbird-bn_BD-17.0.4-1.mga2.noarch.rpm
thunderbird-br-17.0.4-1.mga2.noarch.rpm
thunderbird-ca-17.0.4-1.mga2.noarch.rpm
thunderbird-cs-17.0.4-1.mga2.noarch.rpm
thunderbird-da-17.0.4-1.mga2.noarch.rpm
thunderbird-de-17.0.4-1.mga2.noarch.rpm
thunderbird-el-17.0.4-1.mga2.noarch.rpm
thunderbird-en_GB-17.0.4-1.mga2.noarch.rpm
thunderbird-es_AR-17.0.4-1.mga2.noarch.rpm
thunderbird-es_ES-17.0.4-1.mga2.noarch.rpm
thunderbird-et-17.0.4-1.mga2.noarch.rpm
thunderbird-eu-17.0.4-1.mga2.noarch.rpm
thunderbird-fi-17.0.4-1.mga2.noarch.rpm
thunderbird-fr-17.0.4-1.mga2.noarch.rpm
thunderbird-fy-17.0.4-1.mga2.noarch.rpm
thunderbird-ga-17.0.4-1.mga2.noarch.rpm
thunderbird-gd-17.0.4-1.mga2.noarch.rpm
thunderbird-gl-17.0.4-1.mga2.noarch.rpm
thunderbird-he-17.0.4-1.mga2.noarch.rpm
thunderbird-hu-17.0.4-1.mga2.noarch.rpm
thunderbird-id-17.0.4-1.mga2.noarch.rpm
thunderbird-is-17.0.4-1.mga2.noarch.rpm
thunderbird-it-17.0.4-1.mga2.noarch.rpm
thunderbird-ja-17.0.4-1.mga2.noarch.rpm
thunderbird-ko-17.0.4-1.mga2.noarch.rpm
thunderbird-lt-17.0.4-1.mga2.noarch.rpm
thunderbird-nb_NO-17.0.4-1.mga2.noarch.rpm
thunderbird-nl-17.0.4-1.mga2.noarch.rpm
thunderbird-nn_NO-17.0.4-1.mga2.noarch.rpm
thunderbird-pa_IN-17.0.4-1.mga2.noarch.rpm
thunderbird-pl-17.0.4-1.mga2.noarch.rpm
thunderbird-pt_BR-17.0.4-1.mga2.noarch.rpm
thunderbird-pt_PT-17.0.4-1.mga2.noarch.rpm
thunderbird-ro-17.0.4-1.mga2.noarch.rpm
thunderbird-ru-17.0.4-1.mga2.noarch.rpm
thunderbird-si-17.0.4-1.mga2.noarch.rpm
thunderbird-sk-17.0.4-1.mga2.noarch.rpm
thunderbird-sl-17.0.4-1.mga2.noarch.rpm
thunderbird-sq-17.0.4-1.mga2.noarch.rpm
thunderbird-sv_SE-17.0.4-1.mga2.noarch.rpm
thunderbird-ta_LK-17.0.4-1.mga2.noarch.rpm
thunderbird-tr-17.0.4-1.mga2.noarch.rpm
thunderbird-uk-17.0.4-1.mga2.noarch.rpm
thunderbird-vi-17.0.4-1.mga2.noarch.rpm
thunderbird-zh_CN-17.0.4-1.mga2.noarch.rpm
thunderbird-zh_TW-17.0.4-1.mga2.noarch.rpm
nsinstall-17.0.4-1.mga2.i586.rpm
thunderbird-17.0.4-1.mga2.i586.rpm
thunderbird-enigmail-17.0.4-1.mga2.i586.rpm
thunderbird-debug-17.0.4-1.mga2.i586.rpm

x86_64:
firefox-17.0.4-1.mga2.x86_64.rpm
firefox-devel-17.0.4-1.mga2.x86_64.rpm
firefox-debug-17.0.4-1.mga2.x86_64.rpm
firefox-af-17.0.4-1.mga2.noarch.rpm
firefox-ar-17.0.4-1.mga2.noarch.rpm
firefox-ast-17.0.4-1.mga2.noarch.rpm
firefox-be-17.0.4-1.mga2.noarch.rpm
firefox-bg-17.0.4-1.mga2.noarch.rpm
firefox-bn_BD-17.0.4-1.mga2.noarch.rpm
firefox-bn_IN-17.0.4-1.mga2.noarch.rpm
firefox-br-17.0.4-1.mga2.noarch.rpm
firefox-bs-17.0.4-1.mga2.noarch.rpm
firefox-ca-17.0.4-1.mga2.noarch.rpm
firefox-cs-17.0.4-1.mga2.noarch.rpm
firefox-cy-17.0.4-1.mga2.noarch.rpm
firefox-da-17.0.4-1.mga2.noarch.rpm
firefox-de-17.0.4-1.mga2.noarch.rpm
firefox-el-17.0.4-1.mga2.noarch.rpm
firefox-en_GB-17.0.4-1.mga2.noarch.rpm
firefox-en_ZA-17.0.4-1.mga2.noarch.rpm
firefox-eo-17.0.4-1.mga2.noarch.rpm
firefox-es_AR-17.0.4-1.mga2.noarch.rpm
firefox-es_CL-17.0.4-1.mga2.noarch.rpm
firefox-es_ES-17.0.4-1.mga2.noarch.rpm
firefox-es_MX-17.0.4-1.mga2.noarch.rpm
firefox-et-17.0.4-1.mga2.noarch.rpm
firefox-eu-17.0.4-1.mga2.noarch.rpm
firefox-fa-17.0.4-1.mga2.noarch.rpm
firefox-fi-17.0.4-1.mga2.noarch.rpm
firefox-fr-17.0.4-1.mga2.noarch.rpm
firefox-fy-17.0.4-1.mga2.noarch.rpm
firefox-ga_IE-17.0.4-1.mga2.noarch.rpm
firefox-gd-17.0.4-1.mga2.noarch.rpm
firefox-gl-17.0.4-1.mga2.noarch.rpm
firefox-gu_IN-17.0.4-1.mga2.noarch.rpm
firefox-he-17.0.4-1.mga2.noarch.rpm
firefox-hi-17.0.4-1.mga2.noarch.rpm
firefox-hr-17.0.4-1.mga2.noarch.rpm
firefox-hu-17.0.4-1.mga2.noarch.rpm
firefox-hy-17.0.4-1.mga2.noarch.rpm
firefox-id-17.0.4-1.mga2.noarch.rpm
firefox-is-17.0.4-1.mga2.noarch.rpm
firefox-it-17.0.4-1.mga2.noarch.rpm
firefox-ja-17.0.4-1.mga2.noarch.rpm
firefox-kk-17.0.4-1.mga2.noarch.rpm
firefox-kn-17.0.4-1.mga2.noarch.rpm
firefox-ko-17.0.4-1.mga2.noarch.rpm
firefox-ku-17.0.4-1.mga2.noarch.rpm
firefox-lg-17.0.4-1.mga2.noarch.rpm
firefox-lt-17.0.4-1.mga2.noarch.rpm
firefox-lv-17.0.4-1.mga2.noarch.rpm
firefox-mai-17.0.4-1.mga2.noarch.rpm
firefox-mk-17.0.4-1.mga2.noarch.rpm
firefox-ml-17.0.4-1.mga2.noarch.rpm
firefox-mr-17.0.4-1.mga2.noarch.rpm
firefox-nb_NO-17.0.4-1.mga2.noarch.rpm
firefox-nl-17.0.4-1.mga2.noarch.rpm
firefox-nn_NO-17.0.4-1.mga2.noarch.rpm
firefox-nso-17.0.4-1.mga2.noarch.rpm
firefox-or-17.0.4-1.mga2.noarch.rpm
firefox-pa_IN-17.0.4-1.mga2.noarch.rpm
firefox-pl-17.0.4-1.mga2.noarch.rpm
firefox-pt_BR-17.0.4-1.mga2.noarch.rpm
firefox-pt_PT-17.0.4-1.mga2.noarch.rpm
firefox-ro-17.0.4-1.mga2.noarch.rpm
firefox-ru-17.0.4-1.mga2.noarch.rpm
firefox-si-17.0.4-1.mga2.noarch.rpm
firefox-sk-17.0.4-1.mga2.noarch.rpm
firefox-sl-17.0.4-1.mga2.noarch.rpm
firefox-sq-17.0.4-1.mga2.noarch.rpm
firefox-sr-17.0.4-1.mga2.noarch.rpm
firefox-sv_SE-17.0.4-1.mga2.noarch.rpm
firefox-ta-17.0.4-1.mga2.noarch.rpm
firefox-ta_LK-17.0.4-1.mga2.noarch.rpm
firefox-te-17.0.4-1.mga2.noarch.rpm
firefox-th-17.0.4-1.mga2.noarch.rpm
firefox-tr-17.0.4-1.mga2.noarch.rpm
firefox-uk-17.0.4-1.mga2.noarch.rpm
firefox-vi-17.0.4-1.mga2.noarch.rpm
firefox-zh_CN-17.0.4-1.mga2.noarch.rpm
firefox-zh_TW-17.0.4-1.mga2.noarch.rpm
firefox-zu-17.0.4-1.mga2.noarch.rpm
thunderbird-ar-17.0.4-1.mga2.noarch.rpm
thunderbird-ast-17.0.4-1.mga2.noarch.rpm
thunderbird-be-17.0.4-1.mga2.noarch.rpm
thunderbird-bg-17.0.4-1.mga2.noarch.rpm
thunderbird-bn_BD-17.0.4-1.mga2.noarch.rpm
thunderbird-br-17.0.4-1.mga2.noarch.rpm
thunderbird-ca-17.0.4-1.mga2.noarch.rpm
thunderbird-cs-17.0.4-1.mga2.noarch.rpm
thunderbird-da-17.0.4-1.mga2.noarch.rpm
thunderbird-de-17.0.4-1.mga2.noarch.rpm
thunderbird-el-17.0.4-1.mga2.noarch.rpm
thunderbird-en_GB-17.0.4-1.mga2.noarch.rpm
thunderbird-es_AR-17.0.4-1.mga2.noarch.rpm
thunderbird-es_ES-17.0.4-1.mga2.noarch.rpm
thunderbird-et-17.0.4-1.mga2.noarch.rpm
thunderbird-eu-17.0.4-1.mga2.noarch.rpm
thunderbird-fi-17.0.4-1.mga2.noarch.rpm
thunderbird-fr-17.0.4-1.mga2.noarch.rpm
thunderbird-fy-17.0.4-1.mga2.noarch.rpm
thunderbird-ga-17.0.4-1.mga2.noarch.rpm
thunderbird-gd-17.0.4-1.mga2.noarch.rpm
thunderbird-gl-17.0.4-1.mga2.noarch.rpm
thunderbird-he-17.0.4-1.mga2.noarch.rpm
thunderbird-hu-17.0.4-1.mga2.noarch.rpm
thunderbird-id-17.0.4-1.mga2.noarch.rpm
thunderbird-is-17.0.4-1.mga2.noarch.rpm
thunderbird-it-17.0.4-1.mga2.noarch.rpm
thunderbird-ja-17.0.4-1.mga2.noarch.rpm
thunderbird-ko-17.0.4-1.mga2.noarch.rpm
thunderbird-lt-17.0.4-1.mga2.noarch.rpm
thunderbird-nb_NO-17.0.4-1.mga2.noarch.rpm
thunderbird-nl-17.0.4-1.mga2.noarch.rpm
thunderbird-nn_NO-17.0.4-1.mga2.noarch.rpm
thunderbird-pa_IN-17.0.4-1.mga2.noarch.rpm
thunderbird-pl-17.0.4-1.mga2.noarch.rpm
thunderbird-pt_BR-17.0.4-1.mga2.noarch.rpm
thunderbird-pt_PT-17.0.4-1.mga2.noarch.rpm
thunderbird-ro-17.0.4-1.mga2.noarch.rpm
thunderbird-ru-17.0.4-1.mga2.noarch.rpm
thunderbird-si-17.0.4-1.mga2.noarch.rpm
thunderbird-sk-17.0.4-1.mga2.noarch.rpm
thunderbird-sl-17.0.4-1.mga2.noarch.rpm
thunderbird-sq-17.0.4-1.mga2.noarch.rpm
thunderbird-sv_SE-17.0.4-1.mga2.noarch.rpm
thunderbird-ta_LK-17.0.4-1.mga2.noarch.rpm
thunderbird-tr-17.0.4-1.mga2.noarch.rpm
thunderbird-uk-17.0.4-1.mga2.noarch.rpm
thunderbird-vi-17.0.4-1.mga2.noarch.rpm
thunderbird-zh_CN-17.0.4-1.mga2.noarch.rpm
thunderbird-zh_TW-17.0.4-1.mga2.noarch.rpm
nsinstall-17.0.4-1.mga2.x86_64.rpm
thunderbird-17.0.4-1.mga2.x86_64.rpm
thunderbird-enigmail-17.0.4-1.mga2.x86_64.rpm
thunderbird-debug-17.0.4-1.mga2.x86_64.rpm

SRPMS:
firefox-17.0.4-1.mga2.src.rpm
firefox-l10n-17.0.4-1.mga2.src.rpm
thunderbird-l10n-17.0.4-1.mga2.src.rpm
thunderbird-17.0.4-1.mga2.src.rpm

References:
https://bugzilla.mozilla.org/show_bug.cgi?id=848644
https://bugs.mageia.org/show_bug.cgi?id=9343
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-...