[USN-1123-1] xulrunner-1.9.1 vulnerabilities
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigC372335CCC37D5CEE256DA25
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Ubuntu Security Notice USN-1123-1
April 30, 2011
xulrunner-1.9.1 vulnerabilities
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 9.10
Summary:
Multiple xulrunner-1.9.1 vulnerabilities
Software Description:
- xulrunner-1.9.1: XUL + XPCOM application runner
Details:
A large number of security issues were discovered in the Gecko rendering
engine. If a user were tricked into viewing a malicious website, a remote=
attacker could exploit a variety of issues related to web browser securit=
y,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 9.10:
xulrunner-1.9.1 1.9.1.19+build2+nobinonly-0ubuntu0.9.10=
=2E1
After a standard system update you need to restart any applications which=
use Xulrunner to make all the necessary changes.
References:
CVE-2010-3776 CVE-2010-3778 CVE-2011-0053 CVE-2011-0062 CVE-2011-0051 C=
VE-2011-0055 CVE-2011-0054 CVE-2011-0056 CVE-2011-0057 CVE-2011-0058 CVE-=
2010-1585 CVE-2011-0059 CVE-2011-0069 CVE-2011-0070 CVE-2011-0080 CVE-201=
1-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0072 CVE-2011-0=
065 CVE-2011-0066 CVE-2011-0073 CVE-2011-0067 CVE-2011-0071 CVE-2011-1202=
Package Information:
https://launchpad.net/ubuntu/+source/xulrunner-1.9.1/1.9.1.19+build2+no=
binonly-0ubuntu0.9.10.1
--------------enigC372335CCC37D5CEE256DA25
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk27VlgACgkQTniv4aqX/VnGFQCeITthesbBBwXMjryWYLnC3JEW
1w8An2gU6wCRR9H/00bckRZavrXvXg8O
=gnx9
-----END PGP SIGNATURE-----
--------------enigC372335CCC37D5CEE256DA25--