Big Blog

Arts & Culture
Biological Science
Blog Watch
Computer Games
Computer Security
Cricket
Data Privacy
Developer
Domain Names
E-commerce
Gadgets
General Science
Handhelds
IP & Patents
Java
Linux
MP3
Nanotech
Online Auctions
Online Legal Issues
Open Source
Personal Finance
Photography
Quirky
Robotics
Search Engines
Space Science
Top Internet
Top Stories
Top Tech
Video Games
Web Developer
Webmaster Tips
XML & Metadata
{Home}



RHSA 2008 0569 01 Critical firefox security update: related news

[RHSA-2008:0569-01] Critical: firefox security update

Red Hat Security Advisory Synopsis: Â Â Â Â Â Critical: firefox security update Advisory ID: Â Â Â RHSA-2008:0569-01 Product: Â Â Â Â Â Red Hat Enterprise Linux Advisory URL: Â Â Â https://rhn.redhat.com/errata/RHSA-2008-0569.html Issue date: Â Â Â Â 2008-07-02 CVE Names: Â Â Â Â CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 Â Â Â Â Â Â Â Â Â Â CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 Â Â Â Â Â Â Â Â Â Â CVE-2008-2805 CVE-2008-2807 CVE-2008-2808 Â Â Â Â Â Â Â Â Â Â CVE-2008-2809 CVE-2008-2810 CVE-2008-2811 ===================================================================== 1. Summary: Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

Firefox 2.0.0.16 Released

As part of Mozilla Corporation's ongoing stability and security update process, Firefox 2.0.0.16 is now available for Windows, Mac, and Linux for free download from http://www.mozilla.com/firefox/all-older.html. We strongly recommend that all Firefox users upgrade to this latest release. If you already have Firefox 2.x, you will receive an automated update notification within 24 to 48 hours. This update can also be applied manually by selecting "Check for Updates?" from the Help menu. For a list of changes and more information, please review the Firefox 2.0.0.16 Release Notes at: http://www.mozilla.com/firefox/2.0.0.16/releasenotes/ Note: Firefox 2.0.0.x will be maintained with security and stability updates until mid-December, 2008. All users are encouraged to upgrade to Firefox 3.

Mozilla Firefox 2.0 Has Multiple Bugs That Permit Remote Code Execution, Certificate Spoofing, Cross-Site Scripting, and Other Impacts

CVE Reference: CVE-2008-2798 , CVE-2008-2799 , CVE-2008-2800 , CVE-2008-2801 , CVE-2008-2802 , CVE-2008-2803 , CVE-2008-2805 , CVE-2008-2806 , CVE-2008-2807 , CVE-2008-2808 , CVE-2008-2809 , CVE-2008-2810 , CVE-2008-2811

Oracle Database Bugs Let Remote Users Access and Modify Data and Cause Denial of Service Conditions and Let Local Users Gain Elevated Privileges

CVE Reference: CVE-2008-2587 , CVE-2008-2590 , CVE-2008-2591 , CVE-2008-2592 , CVE-2008-2600 , CVE-2008-2602 , CVE-2008-2603 , CVE-2008-2604 , CVE-2008-2605 , CVE-2008-2607 , CVE-2008-2608 , CVE-2008-2611 , CVE-2008-2613

Firefox 3.0.1 released

As part of Mozilla Corporation's ongoing stability and security update process, Firefox 3.0.1 is now available for Windows, Mac, and Linux for free download from http://getfirefox.com/. We strongly recommend that all Firefox users upgrade to this latest release. If you already have Firefox 3.0, you will receive an automated update notification within 24 to 48 hours. This update can also be applied manually by selecting "Check for Updates?" from the Help menu. For a list of changes and more information, please review the Firefox 3.0.1 Release Notes at: http://www.mozilla.com/firefox/3.0.1/releasenotes/ Note: All Firefox 2.0.0.x users are encouraged to upgrade to Firefox 3.0.1 by downloading it from http://getfirefox.com/. (follow-up: mozilla.

[RHSA-2008:0595-01] Critical: java-1.5.0-sun security update

454607 - CVE-2008-3113 Java Web Start arbitrary file creation/deletion file with user permissions (6704077)

FireFox 3 sets world record, FireFox 2 patched...

Mozilla on Tuesday posted Firefox 2.0.0.15, an update to its web browser that resolves several vulnerabilities, ranging from several benign problems, to critical bug fixes related to arbitrary code execution and remote control of a user's system. Among the major fixes are MFSA 2008-21, 2008-24, 2008-25, and 2008-33, which resolve crashes when memory is corrupted, Chrome script loading vulnerabilities, arbitrary code execution in a .loadSubScript() command, as well as crashing and remote code execution.

Firefox update fixes Mac security issue

Mozilla has released an update to Firefox, its popular Web browser. The update is available for download either from the Firefox Web site or through Firefox itself, if you select "Check for Updates" from the Help menu.

Firefox update fixes Mac security issue

Mozilla has released an update to Firefox, its popular Web browser. The update is available for download either from the Firefox Web site or through Firefox itself, if you select "Check for Updates" from the Help menu.

Firefox Update Fixes Mac Security Issue

Mozilla has released an update to Firefox, its popular Web browser. The update is available for download either from the Firefox Web site or through Firefox itself, if you select "Check for Updates" from the Help menu.

[DSA 1560-1] New sympa packages fix denial of service

Debian Security Advisory DSA-1600-1 security@debian.org http://www.debian.org/security/ Steve Kemp July 01, 2008 http://www.debian.org/security/faq ------------------------------------------------------------------------ Package : sympa Vulnerability : dos Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-1648 Debian Bug : 475163 It was discovered that sympa, a modern mailing list manager, would crash when processing certain types of malformed messages. For the stable distribution (etch), this problem has been fixed in version 5.2.3-1.2+etch1. For the unstable distribution (sid), this problem has been fixed in version 5.3.4-4. We recommend that you upgrade your sympa package.

China Film Distributor Poly Bo> 2008-8-19 " India's Mahindra Group in Seco> 2008-8-19 " China-Based MP3 Maker Plans Re> 2008-8-19 " China's Qian Feng Fabric to Ra> 2008-8-19 " Suzhou Ventures Group and Digi> 2008-8-19 " Infotech Acquires 14.74% Stake

Copyright © 2008 Zero2IPO Group. All rights reserved

China's Qian Feng Fabric to Ra> 2008-8-19 " India's Mahindra Group in Seco> 2008-8-19 " China-Based MP3 Maker Plans Re> 2008-8-19 ...more >> Networking Opportunities " China Venture Capital & Privat> 2008-9-10 " China Venture Capital & Privat> 2008-1

Copyright © 2008 Zero2IPO Group. All rights reserved

Secure Computing Positioned as "Top Player" in Radicati Group's Corporate Web Security Market Quadrant

Secure Computing Corporation (NASDAQ: SCUR), a leading enterprise gateway security company, today announced that its Secure Web (formerly Webwasher®) has been positioned as a "Top Player" in The Radicati Group's new market brief, "Corporate Web Security - Market Quadrant 2008." Published in June 2008, the brief evaluates nine vendors and focuses only on the Corporate Web Security segment of the Security Market, which according to the report, is expected to grow in value from $531 million in 2008 to $1.1 billion by 2012. The full market brief is available for review at www.securecomputing.com.

Another Firefox 2 update issued

Firefox Mozilla has issued an update for Firefox 2, recommending all Firefox 2 users install it immediately to ensure their security.

Critical Flaws Open Up Firefox 2.0x To Attack

Secunia researchers detected numerous security vulnerabilities in the Mozilla Firefox 2.0x Web browser, many of which enable malicious attackers to hack into vulnerable systems and either shut down or take complete control of a user's computer. Researchers at Secunia, a Copenhagen, Denmark-based security company specializing in vulnerability assessment and management, issued a security advisory Wednesday, warning users of multiple errors they deemed "highly critical."

Firefox Users Stay Ahead On the Update Curve

Reader Alex links to news of a study comparing the currency and patch level of various Web browsers, excerpting: "Firefox users were far and away the most likely to use the latest version, with an overwhelming 83.3 percent running an updated browser on any given day. However, despite Firefox's single click integrate auto-update functionality, 16.7 percent of Firefox users still continue to access the Web with an outdated version of the browser, researchers said. The study also revealed that the majority of Safari users (65.3) percent were likely to use the latest version of the browser between December 2007 and June 2008, after Safari version 3 became available. Meanwhile, Microsoft's Internet Explorer users ranked last in terms of safe browsing.

Procter and Gamble Selects IBM Internet Security Systems to Help Amplify Its Threat Protection, Simplify Its Security

ARMONK, NY, Aug 29 (MARKET WIRE) -- IBM (NYSE: IBM) today announced that Procter and Gamble (NYSE: PG) has selected products and services from IBM's Internet Security Systems (ISS) division to expand its global cyber-security initiative. The agreement will strengthen Procter and Gamble's (P&G) threat protection arsenal by streamlining the management of its layered security tools and ultimately can help deliver substantial savings in administrative costs. This simplified security approach will streamline the management and help increase the efficiency of P&G's cyber-security project. First developed in 2005, P&G pioneered a layered, preventative network protection and vulnerability assessment project to mitigate and eliminate major costly internal vulnerabilities.

[DSA 1604-1] BIND 8 deprecation notice

Debian Security Advisory DSA-1604-1 security@debian.org http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq ------------------------------------------------------------------------ Package : bind Vulnerability : DNS cache poisoning Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-1447 CERT advisory : VU#800113 Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. The BIND 8 legacy code base could not be updated to include the recommended countermeasure (source port randomization, see DSA-1603-1 for details).

Vulnerability in Firefox and other Mozilla programs

Bonn - Several security holes have been discovered in Firefox and other software from Mozilla. The Thunderbird e-mail program and the Seamonkey program suite have also been affected. Users should update their software as soon as possible once patches become available, recommends the German Federal Agency for Security in Information Technology (BSI) in Bonn. The warning applies to Firefox versions prior to 2.0.0.16 and 3.0.1 as well as to Seamonkey. In the latter case, any version prior to 1.1.11 is vulnerable to hacker attacks. Those who do not receive automated updates can download them manually at http://www.mozilla.com/firefox or http://www.seamonkey-project.org/releases.

Mozilla Patches Firefox 2 And 3

Chicago (IL) - Mozilla updated both Firefox 2 and 3 in order to plug security critical security holes, squash some annoying bugs and deliver a few user-centric tweaks. Although users are recommended to update their browser, TG Daily noticed that some popular add-ons for Firefox 3 are not yet compatible with the patched browser.

Java update to boost applets

An impending update to Java might sound like just an incremental release, based on its cumbersome naming: Java Platform Standard Edition 6 Update 10 (Java SE 6 u10).? But the upgrade actually features technology considered critical to reviving the concept of client-side Java applets. Applet startup times are improved and applets can be turned into desktop widgets via different improvements in Java SE 6u10.

Java update to boost applets

An impending update to Java might sound like just an incremental release, based on its cumbersome naming: Java Platform Standard Edition 6 Update 10 (Java SE 6 u10). But the upgrade actually features technology considered critical to reviving the concept of client-side Java applets.


Search News:


Copyright © 2001-2008 Jonathan Hedley