Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)
critical Nessus Plugin ID 42297
Synopsis
The remote Fedora host is missing one or more security updates.Description
Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories:http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected packages.See Also
https://www.mozilla.org/en-US/security/known-
https://bugzilla.redhat.com/show_bug.cgi?id=524815
https://bugzilla.redhat.com/show_bug.cgi?id=530151
https://bugzilla.redhat.com/show_bug.cgi?id=530155
https://bugzilla.redhat.com/show_bug.cgi?id=530156
https://bugzilla.redhat.com/show_bug.cgi?id=530157
https://bugzilla.redhat.com/show_bug.cgi?id=530162
https://bugzilla.redhat.com/show_bug.cgi?id=530167
https://bugzilla.redhat.com/show_bug.cgi?id=530168
https://bugzilla.redhat.com/show_bug.cgi?id=530567
http://www.nessus.org/u?9990574d
http://www.nessus.org/u?0ea3a660
http://www.nessus.org/u?9da39c92
http://www.nessus.org/u?01e7b130
http://www.nessus.org/u?bca2e40b
http://www.nessus.org/u?4fcf2516
http://www.nessus.org/u?9d11e095
http://www.nessus.org/u?2d24099d
http://www.nessus.org/u?d0e62233
http://www.nessus.org/u?005d9ce7
http://www.nessus.org/u?ebff9bdb
http://www.nessus.org/u?3106a132
http://www.nessus.org/u?d37b51fd
http://www.nessus.org/u?7e8cbc12
http://www.nessus.org/u?1246cf37
http://www.nessus.org/u?f9e52713
http://www.nessus.org/u?b0a35cb7
http://www.nessus.org/u?33574a8b
http://www.nessus.org/u?89a1035d
http://www.nessus.org/u?8dd7f9f7
Plugin Details
Severity: Critical
ID: 42297
File Name: fedora_2009-10878.nasl
Version: 1.20
Type: local
Agent: unix
Family: Fedora Local Security Checks
Published: 10/29/2009
Updated: 1/11/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:fedoraproject:fedora:Miro, p-cpe:/a:fedoraproject:fedora:blam, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:eclipse, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:evolution-rss, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:hulahop, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:monodevelop, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:pcmanx-gtk2, p-cpe:/a:fedoraproject:fedora:perl-Gtk2-MozEmbed, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:seahorse-plugins, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:11
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list
Patch Publication Date: 10/29/2009
Vulnerability Publication Date: 9/21/2009
Reference Information
CVE: CVE-2009-0689, CVE-2009-3274, CVE-2009-3370, CVE-2009-3372, CVE-2009-3373, CVE-2009-3374, CVE-2009-3375, CVE-2009-3376, CVE-2009-3380
FEDORA: 2009-10878