Fedora 11 Security Update: blam-1.8.5-15.fc11,chmsee-1.0.1-12.fc11,epiphany-2.26.3-5.fc11,epiphany-extensions-2.26.1-7.fc11,evolution-rss-0.1.4-5.fc11,firefox-3.5.4-1.fc11,galeon-2.0.7-17.fc11,gnome-python2-extras-2.25.3-8.fc11,gnome-web-photo-0.7-7.fc11,

Resolved Bugs
530567 – CVE-2009-3380 Firefox crashes with evidence of memory corruption
530168 – CVE-2009-3376 Firefox download filename spoofing with RTL override
530167 – CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
530162 – CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
530157 – CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
530156 – CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
530155 – CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
524815 – CVE-2009-3274 Firefox: Predictable /tmp pathname use
530151 – CVE-2009-3370 Firefox form history vulnerable to stealing

Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner…

Read More