http://bugzilla.novell.com/show_bug.cgi?id=551218 Summary: Firefox security updates - 3.5.4 and 3.0.15 Classification: openSUSE Product: openSUSE 11.2 Version: RC 2 Platform: x86-64 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: doiggl@velocitynet.com.au QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.4) Gecko/20091017 SUSE/2.0.0-3.1 SeaMonkey/2.0

From url http://www.theinquirer.net/inquirer/news/1560076/firefox-updated

MOZILLA HAS PATCHED both of its Firefox 3.5 and 3.0 web browsers today, to versions 3.5.4 and 3.0.15 respectively. Overall, 11 critical bugs were fixed in Firefox 3.5.3 out of a total of 16 patches. Firefox 3.0.14 received 10 patches, with 5 fixes marked critical. Several of the bugs might have enabled exploits that allowed malware writers to run unauthorised code on users' machines, including a bug in Firefox's GIF parser and bugs in several individual third party modules - liboggz, libvorbis and liboggplay - all of which were added in Firefox 3.5. Four critical stability issues were also fixed across both versions of Firefox, which were marked as critical and upon which Mozzarella commented: "Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code." Mozilla strongly recommends that all Firefox users upgrade to the latest releases. You can do this by downloading the latest release from http://firefox.com/ or by selecting "Check for Updates" from the Firefox Help menu. You can view the release notes for Firefox 3.5.4 here and for Firefox 3.0.15 http://www.mozilla.com/en-US/firefox/3.0.15/releasenotes/ Reproducible: Always -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.