rPath Security Advisory: 2006-0091-1
Published: 2006-06-02
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    Local User Deterministic Vulnerability
Updated Versions:
    firefox=/conary.rpath.com@rpl:devel//1/1.5.0.4-1-0.1
    thunderbird=/conary.rpath.com@rpl:devel//1/1.5.0.4-1-0.1

References:
    http://issues.rpath.com/browse/RPL-398
    http://issues.rpath.com/browse/RPL-341
    http://www.mozilla.com/firefox/releases/1.5.0.4.html
    http://www.mozilla.com/thunderbird/releases/1.5.0.4.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-31.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-32.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-33.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-34.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-35.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-36.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-37.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-38.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-39.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-40.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-41.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-42.html
    http://www.mozilla.org/security/announce/2006/mfsa2006-43.html

Description:
    Previous versions of the firefox browser and thunderbird mail user
    agent have multiple vulnerabilities, some of which allow remote
    servers to compromise user accounts.  The firefox browser is the
    default browser on rPath Linux, and all users are strongly recommended
    to update firefox and thunderbird as soon as possible.