Fedora 9 : Miro-2.0.3-5.fc9 / blam-1.8.5-10.fc9.1 / chmsee-1.0.1-13.fc9 / devhelp-0.19.1-13.fc9 / etc (2009-6411)

High Nessus Plugin ID 39406

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Update to new upstream Firefox version 3.0.11, fixing multiple security issues detailed in the upstream advisories:
http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.11 Update also includes all packages depending on gecko-libs rebuild against new version of Firefox / XULRunner.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/known-

https://bugzilla.redhat.com/show_bug.cgi?id=503568

https://bugzilla.redhat.com/show_bug.cgi?id=503569

https://bugzilla.redhat.com/show_bug.cgi?id=503570

https://bugzilla.redhat.com/show_bug.cgi?id=503573

https://bugzilla.redhat.com/show_bug.cgi?id=503576

https://bugzilla.redhat.com/show_bug.cgi?id=503578

https://bugzilla.redhat.com/show_bug.cgi?id=503579

https://bugzilla.redhat.com/show_bug.cgi?id=503580

https://bugzilla.redhat.com/show_bug.cgi?id=503581

https://bugzilla.redhat.com/show_bug.cgi?id=503582

https://bugzilla.redhat.com/show_bug.cgi?id=503583

http://www.nessus.org/u?2e980224

http://www.nessus.org/u?31d20ba0

http://www.nessus.org/u?a0505c70

http://www.nessus.org/u?65288620

http://www.nessus.org/u?a9342bb8

http://www.nessus.org/u?1c2c3502

http://www.nessus.org/u?2d77c40b

http://www.nessus.org/u?05dce289

http://www.nessus.org/u?b4cd61cb

http://www.nessus.org/u?4574d88c

http://www.nessus.org/u?cb771f2c

http://www.nessus.org/u?c97b85f5

http://www.nessus.org/u?a30aa2d3

http://www.nessus.org/u?dfae7621

http://www.nessus.org/u?dca39034

http://www.nessus.org/u?70eb314b

http://www.nessus.org/u?98be733d

http://www.nessus.org/u?75dffff9

http://www.nessus.org/u?4319738c

http://www.nessus.org/u?9170f15e

Plugin Details

Severity: High

ID: 39406

File Name: fedora_2009-6411.nasl

Version: 1.21

Type: local

Agent: unix

Published: 2009/06/16

Updated: 2019/08/02

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:Miro, p-cpe:/a:fedoraproject:fedora:blam, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:evolution-rss, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:gtkmozembedmm, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:mugshot, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:totem, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:9

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2009/06/15

Vulnerability Publication Date: 2009/06/12

Reference Information

CVE: CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1834, CVE-2009-1835, CVE-2009-1836, CVE-2009-1837, CVE-2009-1838, CVE-2009-1839, CVE-2009-1840, CVE-2009-1841

BID: 35360, 35370, 35371, 35372, 35373, 35377, 35380, 35383, 35386

FEDORA: 2009-6411

CWE: 20, 94, 200, 264, 287, 362