Fedora 9 : Miro-2.0.3-5.fc9 / blam-1.8.5-10.fc9.1 / chmsee-1.0.1-13.fc9 / devhelp-0.19.1-13.fc9 / etc (2009-6411)

high Nessus Plugin ID 39406
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Update to new upstream Firefox version 3.0.11, fixing multiple security issues detailed in the upstream advisories:
http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.11 Update also includes all packages depending on gecko-libs rebuild against new version of Firefox / XULRunner.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/known-

https://bugzilla.redhat.com/show_bug.cgi?id=503568

https://bugzilla.redhat.com/show_bug.cgi?id=503569

https://bugzilla.redhat.com/show_bug.cgi?id=503570

https://bugzilla.redhat.com/show_bug.cgi?id=503573

https://bugzilla.redhat.com/show_bug.cgi?id=503576

https://bugzilla.redhat.com/show_bug.cgi?id=503578

https://bugzilla.redhat.com/show_bug.cgi?id=503579

https://bugzilla.redhat.com/show_bug.cgi?id=503580

https://bugzilla.redhat.com/show_bug.cgi?id=503581

https://bugzilla.redhat.com/show_bug.cgi?id=503582

https://bugzilla.redhat.com/show_bug.cgi?id=503583

http://www.nessus.org/u?2e980224

http://www.nessus.org/u?31d20ba0

http://www.nessus.org/u?a0505c70

http://www.nessus.org/u?65288620

http://www.nessus.org/u?a9342bb8

http://www.nessus.org/u?1c2c3502

http://www.nessus.org/u?2d77c40b

http://www.nessus.org/u?05dce289

http://www.nessus.org/u?b4cd61cb

http://www.nessus.org/u?4574d88c

http://www.nessus.org/u?cb771f2c

http://www.nessus.org/u?c97b85f5

http://www.nessus.org/u?a30aa2d3

http://www.nessus.org/u?dfae7621

http://www.nessus.org/u?dca39034

http://www.nessus.org/u?70eb314b

http://www.nessus.org/u?98be733d

http://www.nessus.org/u?75dffff9

http://www.nessus.org/u?4319738c

http://www.nessus.org/u?9170f15e

Plugin Details

Severity: High

ID: 39406

File Name: fedora_2009-6411.nasl

Version: 1.22

Type: local

Agent: unix

Published: 6/16/2009

Updated: 1/11/2021

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:Miro, p-cpe:/a:fedoraproject:fedora:blam, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:evolution-rss, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:gtkmozembedmm, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:mugshot, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:totem, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:9

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 6/15/2009

Vulnerability Publication Date: 6/12/2009

Reference Information

CVE: CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1834, CVE-2009-1835, CVE-2009-1836, CVE-2009-1837, CVE-2009-1838, CVE-2009-1839, CVE-2009-1840, CVE-2009-1841

BID: 35360, 35370, 35371, 35372, 35373, 35377, 35380, 35383, 35386

FEDORA: 2009-6411

CWE: 20, 94, 200, 264, 287, 362