---------------------------------------------------------------------Fedora Update Notification
FEDORA-2005-874
2005-09-10
---------------------------------------------------------------------Product     : Fedora Core 3
Name        : mozilla
Version     : 1.7.10                      
Release     : 1.3.2                  
Summary     : A Web browser.
Description :
Mozilla is an open-source Web browser, designed for standards
compliance, performance, and portability.

---------------------------------------------------------------------Update Information:

An updated mozilla package that fixes a security bug is now
available for Fedora Core 3.

This update has been rated as having critical security
impact by the Fedora Security Response Team.

Mozilla is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain
international domain names. An attacker could create a
specially crafted HTML file, which when viewed by the victim
would cause Mozilla to crash or possibly execute arbitrary
code. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2871 to this
issue.

Users of Mozilla are advised to upgrade to this updated
package that contains a backported patch and is not
vulnerable to this issue.

---------------------------------------------------------------------* Fri Sep  9 2005 Christopher Aillon  37:1.7.10-1.3.2
- Fix for CAN-2005-2871


---------------------------------------------------------------------This update can be downloaded from:
  
06e17c6028502048323b02d7ff9d59b4  SRPMS/mozilla-1.7.10-1.3.2.src.rpm
b4d8302d016bb81af7f9bb5939c055d0  x86_64/mozilla-1.7.10-1.3.2.x86_64.rpm
424742831025ce3e0d17cef8324b7f41  x86_64/mozilla-nspr-1.7.10-1.3.2.x86_64.rpm
9a7ef782f2b60d6bc78e3545bc3a5e6c  x86_64/mozilla-nspr-devel-1.7.10-1.3.2.x86_64.rpm
53f99acae7525c07dded462523144e0a  x86_64/mozilla-nss-1.7.10-1.3.2.x86_64.rpm
97472852f74cf09a6a8407e7e3f731f6  x86_64/mozilla-nss-devel-1.7.10-1.3.2.x86_64.rpm
8eddea5ce7d9d47a4c7f5eefb2ef2ae2  x86_64/mozilla-devel-1.7.10-1.3.2.x86_64.rpm
d6a3168a04fa5983eb864bc4c61cf1ad  x86_64/mozilla-mail-1.7.10-1.3.2.x86_64.rpm
83cd83387e54efa1d5fef4cd038c4d2d  x86_64/mozilla-chat-1.7.10-1.3.2.x86_64.rpm
9d8cb41a1d46f8ce4b252c3df531aa1e  x86_64/mozilla-js-debugger-1.7.10-1.3.2.x86_64.rpm
658f1bb2368431e44be3fe50db19ec5d  x86_64/mozilla-dom-inspector-1.7.10-1.3.2.x86_64.rpm
c2afc4080cca4a45fbe42b74cbfe69f8  x86_64/debug/mozilla-debuginfo-1.7.10-1.3.2.x86_64.rpm
194e0ef4b161387897729d7edef996df  x86_64/mozilla-nspr-1.7.10-1.3.2.i386.rpm
e08421fc25692f832b7044bcf0101f73  x86_64/mozilla-nss-1.7.10-1.3.2.i386.rpm
6514c4e91521e86fed53128b267673c7  i386/mozilla-1.7.10-1.3.2.i386.rpm
194e0ef4b161387897729d7edef996df  i386/mozilla-nspr-1.7.10-1.3.2.i386.rpm
b3d721c87a275315f46ad4bcd2910e0e  i386/mozilla-nspr-devel-1.7.10-1.3.2.i386.rpm
e08421fc25692f832b7044bcf0101f73  i386/mozilla-nss-1.7.10-1.3.2.i386.rpm
f02f5be7053f9806f64bd42f3193cfc9  i386/mozilla-nss-devel-1.7.10-1.3.2.i386.rpm
e9183d1ef57b9999980de318fae7be68  i386/mozilla-devel-1.7.10-1.3.2.i386.rpm
d499b6e6170033ec28fa2cd9b6548fb6  i386/mozilla-mail-1.7.10-1.3.2.i386.rpm
d469f6a420bbc48448eabb3892d16e42  i386/mozilla-chat-1.7.10-1.3.2.i386.rpm
0d0e1ad6a15156da6ec62da999de5eed  i386/mozilla-js-debugger-1.7.10-1.3.2.i386.rpm
39c8d0d976d87d86bed44b1136ec1272  i386/mozilla-dom-inspector-1.7.10-1.3.2.i386.rpm
c7a91e7aca4db4452c25cc7e2389c4fb  i386/debug/mozilla-debuginfo-1.7.10-1.3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
----------------------------------------------------------------------- 
fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

Fedora Core 3 Update: mozilla-1.7.10-1.3.2

September 10, 2005
Updated package.

Summary

Mozilla is an open-source Web browser, designed for standards

compliance, performance, and portability.

An updated mozilla package that fixes a security bug is now

available for Fedora Core 3.

This update has been rated as having critical security

impact by the Fedora Security Response Team.

Mozilla is an open source Web browser, advanced email and

newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain

international domain names. An attacker could create a

specially crafted HTML file, which when viewed by the victim

would cause Mozilla to crash or possibly execute arbitrary

code. The Common Vulnerabilities and Exposures project

(cve.mitre.org) has assigned the name CAN-2005-2871 to this

issue.

Users of Mozilla are advised to upgrade to this updated

package that contains a backported patch and is not

vulnerable to this issue.

- Fix for CAN-2005-2871

06e17c6028502048323b02d7ff9d59b4 SRPMS/mozilla-1.7.10-1.3.2.src.rpm

b4d8302d016bb81af7f9bb5939c055d0 x86_64/mozilla-1.7.10-1.3.2.x86_64.rpm

424742831025ce3e0d17cef8324b7f41 x86_64/mozilla-nspr-1.7.10-1.3.2.x86_64.rpm

9a7ef782f2b60d6bc78e3545bc3a5e6c x86_64/mozilla-nspr-devel-1.7.10-1.3.2.x86_64.rpm

53f99acae7525c07dded462523144e0a x86_64/mozilla-nss-1.7.10-1.3.2.x86_64.rpm

97472852f74cf09a6a8407e7e3f731f6 x86_64/mozilla-nss-devel-1.7.10-1.3.2.x86_64.rpm

8eddea5ce7d9d47a4c7f5eefb2ef2ae2 x86_64/mozilla-devel-1.7.10-1.3.2.x86_64.rpm

d6a3168a04fa5983eb864bc4c61cf1ad x86_64/mozilla-mail-1.7.10-1.3.2.x86_64.rpm

83cd83387e54efa1d5fef4cd038c4d2d x86_64/mozilla-chat-1.7.10-1.3.2.x86_64.rpm

9d8cb41a1d46f8ce4b252c3df531aa1e x86_64/mozilla-js-debugger-1.7.10-1.3.2.x86_64.rpm

658f1bb2368431e44be3fe50db19ec5d x86_64/mozilla-dom-inspector-1.7.10-1.3.2.x86_64.rpm

c2afc4080cca4a45fbe42b74cbfe69f8 x86_64/debug/mozilla-debuginfo-1.7.10-1.3.2.x86_64.rpm

194e0ef4b161387897729d7edef996df x86_64/mozilla-nspr-1.7.10-1.3.2.i386.rpm

e08421fc25692f832b7044bcf0101f73 x86_64/mozilla-nss-1.7.10-1.3.2.i386.rpm

6514c4e91521e86fed53128b267673c7 i386/mozilla-1.7.10-1.3.2.i386.rpm

194e0ef4b161387897729d7edef996df i386/mozilla-nspr-1.7.10-1.3.2.i386.rpm

b3d721c87a275315f46ad4bcd2910e0e i386/mozilla-nspr-devel-1.7.10-1.3.2.i386.rpm

e08421fc25692f832b7044bcf0101f73 i386/mozilla-nss-1.7.10-1.3.2.i386.rpm

f02f5be7053f9806f64bd42f3193cfc9 i386/mozilla-nss-devel-1.7.10-1.3.2.i386.rpm

e9183d1ef57b9999980de318fae7be68 i386/mozilla-devel-1.7.10-1.3.2.i386.rpm

d499b6e6170033ec28fa2cd9b6548fb6 i386/mozilla-mail-1.7.10-1.3.2.i386.rpm

d469f6a420bbc48448eabb3892d16e42 i386/mozilla-chat-1.7.10-1.3.2.i386.rpm

0d0e1ad6a15156da6ec62da999de5eed i386/mozilla-js-debugger-1.7.10-1.3.2.i386.rpm

39c8d0d976d87d86bed44b1136ec1272 i386/mozilla-dom-inspector-1.7.10-1.3.2.i386.rpm

c7a91e7aca4db4452c25cc7e2389c4fb i386/debug/mozilla-debuginfo-1.7.10-1.3.2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list

fedora-announce-list@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-announce-list

FEDORA-2005-874 2005-09-10 Name : mozilla Version : 1.7.10 Release : 1.3.2 Summary : A Web browser. Description : Mozilla is an open-source Web browser, designed for standards compliance, performance, and portability. An updated mozilla package that fixes a security bug is now available for Fedora Core 3. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found in the way Mozilla processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Mozilla to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2871 to this issue. Users of Mozilla are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue. - Fix for CAN-2005-2871 06e17c6028502048323b02d7ff9d59b4 SRPMS/mozilla-1.7.10-1.3.2.src.rpm b4d8302d016bb81af7f9bb5939c055d0 x86_64/mozilla-1.7.10-1.3.2.x86_64.rpm 424742831025ce3e0d17cef8324b7f41 x86_64/mozilla-nspr-1.7.10-1.3.2.x86_64.rpm 9a7ef782f2b60d6bc78e3545bc3a5e6c x86_64/mozilla-nspr-devel-1.7.10-1.3.2.x86_64.rpm 53f99acae7525c07dded462523144e0a x86_64/mozilla-nss-1.7.10-1.3.2.x86_64.rpm 97472852f74cf09a6a8407e7e3f731f6 x86_64/mozilla-nss-devel-1.7.10-1.3.2.x86_64.rpm 8eddea5ce7d9d47a4c7f5eefb2ef2ae2 x86_64/mozilla-devel-1.7.10-1.3.2.x86_64.rpm d6a3168a04fa5983eb864bc4c61cf1ad x86_64/mozilla-mail-1.7.10-1.3.2.x86_64.rpm 83cd83387e54efa1d5fef4cd038c4d2d x86_64/mozilla-chat-1.7.10-1.3.2.x86_64.rpm 9d8cb41a1d46f8ce4b252c3df531aa1e x86_64/mozilla-js-debugger-1.7.10-1.3.2.x86_64.rpm 658f1bb2368431e44be3fe50db19ec5d x86_64/mozilla-dom-inspector-1.7.10-1.3.2.x86_64.rpm c2afc4080cca4a45fbe42b74cbfe69f8 x86_64/debug/mozilla-debuginfo-1.7.10-1.3.2.x86_64.rpm 194e0ef4b161387897729d7edef996df x86_64/mozilla-nspr-1.7.10-1.3.2.i386.rpm e08421fc25692f832b7044bcf0101f73 x86_64/mozilla-nss-1.7.10-1.3.2.i386.rpm 6514c4e91521e86fed53128b267673c7 i386/mozilla-1.7.10-1.3.2.i386.rpm 194e0ef4b161387897729d7edef996df i386/mozilla-nspr-1.7.10-1.3.2.i386.rpm b3d721c87a275315f46ad4bcd2910e0e i386/mozilla-nspr-devel-1.7.10-1.3.2.i386.rpm e08421fc25692f832b7044bcf0101f73 i386/mozilla-nss-1.7.10-1.3.2.i386.rpm f02f5be7053f9806f64bd42f3193cfc9 i386/mozilla-nss-devel-1.7.10-1.3.2.i386.rpm e9183d1ef57b9999980de318fae7be68 i386/mozilla-devel-1.7.10-1.3.2.i386.rpm d499b6e6170033ec28fa2cd9b6548fb6 i386/mozilla-mail-1.7.10-1.3.2.i386.rpm d469f6a420bbc48448eabb3892d16e42 i386/mozilla-chat-1.7.10-1.3.2.i386.rpm 0d0e1ad6a15156da6ec62da999de5eed i386/mozilla-js-debugger-1.7.10-1.3.2.i386.rpm 39c8d0d976d87d86bed44b1136ec1272 i386/mozilla-dom-inspector-1.7.10-1.3.2.i386.rpm c7a91e7aca4db4452c25cc7e2389c4fb i386/debug/mozilla-debuginfo-1.7.10-1.3.2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. fedora-announce-list mailing list fedora-announce-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-announce-list

Change Log

References

Update Instructions

Severity
Name : mozilla
Version : 1.7.10
Release : 1.3.2
Summary : A Web browser.

Related News