| Summary: | firefox new security issue CVE-2012-4193 fixed in 10.0.9 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | critical | ||
| Priority: | Normal | CC: | davidwhodgins, geiger.david68210, sysadmin-bugs, tmb |
| Version: | 2 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| Whiteboard: | MGA1TOO mga2-64-OK MGA2-32-OK MGA1-64-OK MGA1-32-OK | ||
| Source RPM: | firefox | CVE: | |
| Status comment: | |||
|
Description
David Walser
2012-10-15 14:24:14 CEST
David Walser
2012-10-15 14:24:46 CEST
Whiteboard:
(none) =>
MGA1TOO Tested OK mga2 64 Java, https, flash, flash over https, spelling, bookmarks etc Whiteboard:
MGA1TOO =>
MGA1TOO mga2-64-OK Testing complete for firefox-10.0.9-1.mga2 and firefox-fr-10.0.9-1.mga2 on Mageia release 2 (Official) for x86_64 ,for me it's Ok ,it works fine and nothind to report. CC:
(none) =>
geiger.david68210 Testing complete Mageia 2 i586, Mageia 1 i586 and x86-64. Could someone from the sysadmin team push the srpms firefox-10.0.9-1.mga2.src.rpm firefox-l10n-10.0.9-1.mga2.src.rpm from Mageia 2 Core Updates Testing to Core Updates and the srpms firefox-10.0.9-1.mga1.src.rpm firefox-l10n-10.0.9-1.mga1.src.rpm from Mageia 1 Core Updates Testing to Core Updates. Advisory: Updated firefox packages fix security vulnerability: Mozilla security researcher moz_bug_r_a4 reported a regression where security wrappers are unwrapped without doing a security check in defaultValue(). This can allow for improper access access to the Location object. In versions 15 and earlier of affected products, there was also the potential for arbitrary code execution (CVE-2012-4193). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4193 http://www.mozilla.org/security/announce/2012/mfsa2012-89.html http://www.mandriva.com/en/support/security/advisories/?dis=mes5&name=MDVSA-2012:167 https://bugs.mageia.org/show_bug.cgi?id=7800 Keywords:
(none) =>
validated_update Update pushed: https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0295 Status:
NEW =>
RESOLVED |