Fedora 10 : Miro-1.2.7-3.fc10 / blam-1.8.5-5.fc10 / devhelp-0.22-2.fc10 / epiphany-2.24.1-3.fc10 / etc (2008-11511)

critical Nessus Plugin ID 37149

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Update to the new upstream Firefox 3.0.5 / XULRunner 1.9.0.5 fixing multiple security issues: http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.5 This update also contains new builds of all applications depending on Gecko libraries, built against new version. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/known-

https://bugzilla.redhat.com/show_bug.cgi?id=476266

https://bugzilla.redhat.com/show_bug.cgi?id=476267

https://bugzilla.redhat.com/show_bug.cgi?id=476269

https://bugzilla.redhat.com/show_bug.cgi?id=476274

https://bugzilla.redhat.com/show_bug.cgi?id=476278

https://bugzilla.redhat.com/show_bug.cgi?id=476280

https://bugzilla.redhat.com/show_bug.cgi?id=476281

https://bugzilla.redhat.com/show_bug.cgi?id=476283

https://bugzilla.redhat.com/show_bug.cgi?id=476285

https://bugzilla.redhat.com/show_bug.cgi?id=476287

https://bugzilla.redhat.com/show_bug.cgi?id=476289

http://www.nessus.org/u?43286554

http://www.nessus.org/u?2a7662d2

http://www.nessus.org/u?a77dd53f

http://www.nessus.org/u?6ba28cd4

http://www.nessus.org/u?45ea898b

http://www.nessus.org/u?210e216d

http://www.nessus.org/u?d066a674

http://www.nessus.org/u?f590d883

http://www.nessus.org/u?aa0539d2

http://www.nessus.org/u?17e9b2ff

http://www.nessus.org/u?a3986692

http://www.nessus.org/u?74a832de

http://www.nessus.org/u?8a083357

http://www.nessus.org/u?a404b81d

http://www.nessus.org/u?d9414c9a

http://www.nessus.org/u?f78fd7da

http://www.nessus.org/u?67f75152

http://www.nessus.org/u?7a6c1776

http://www.nessus.org/u?c4e3fb15

Plugin Details

Severity: Critical

ID: 37149

File Name: fedora_2008-11511.nasl

Version: 1.18

Type: local

Agent: unix

Published: 4/23/2009

Updated: 1/11/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:blam, cpe:/o:fedoraproject:fedora:10, p-cpe:/a:fedoraproject:fedora:yelp, p-cpe:/a:fedoraproject:fedora:miro, p-cpe:/a:fedoraproject:fedora:pcmanx-gtk2, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:evolution-rss, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gecko-sharp2, p-cpe:/a:fedoraproject:fedora:mugshot, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:firefox

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 12/21/2008

Vulnerability Publication Date: 12/17/2008

Reference Information

CVE: CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5505, CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513

CWE: 20, 200, 264, 399, 79

FEDORA: 2008-11511