A new update is available for Fedora Core - [SECURITY] Fedora Core 3 Update: mozilla-1.7.10-1.3.2. Here the announcement:
Fedora Update Notification
FEDORA-2005-874
2005-09-10
---------------------------------------------------------------------
Product : Fedora Core 3
Name : mozilla
Version : 1.7.10
Release : 1.3.2
Summary : A Web browser.
Description :
Mozilla is an open-source Web browser, designed for standards
compliance, performance, and portability.
---------------------------------------------------------------------
Update Information:
An updated mozilla package that fixes a security bug is now
available for Fedora Core 3.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
Mozilla is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.
A bug was found in the way Mozilla processes certain
international domain names. An attacker could create a
specially crafted HTML file, which when viewed by the victim
would cause Mozilla to crash or possibly execute arbitrary
code. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2871 to this
issue.
Users of Mozilla are advised to upgrade to this updated
package that contains a backported patch and is not
vulnerable to this issue.
---------------------------------------------------------------------
* Fri Sep 9 2005 Christopher Aillon <caillon@redhat.com> 37:1.7.10-1.3.2
- Fix for CAN-2005-2871
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
06e17c6028502048323b02d7ff9d59b4 SRPMS/mozilla-1.7.10-1.3.2.src.rpm
b4d8302d016bb81af7f9bb5939c055d0 x86_64/mozilla-1.7.10-1.3.2.x86_64.rpm
424742831025ce3e0d17cef8324b7f41 x86_64/mozilla-nspr-1.7.10-1.3.2.x86_64.rpm
9a7ef782f2b60d6bc78e3545bc3a5e6c x86_64/mozilla-nspr-devel-1.7.10-1.3.2.x86_64.rpm
53f99acae7525c07dded462523144e0a x86_64/mozilla-nss-1.7.10-1.3.2.x86_64.rpm
97472852f74cf09a6a8407e7e3f731f6 x86_64/mozilla-nss-devel-1.7.10-1.3.2.x86_64.rpm
8eddea5ce7d9d47a4c7f5eefb2ef2ae2 x86_64/mozilla-devel-1.7.10-1.3.2.x86_64.rpm
d6a3168a04fa5983eb864bc4c61cf1ad x86_64/mozilla-mail-1.7.10-1.3.2.x86_64.rpm
83cd83387e54efa1d5fef4cd038c4d2d x86_64/mozilla-chat-1.7.10-1.3.2.x86_64.rpm
9d8cb41a1d46f8ce4b252c3df531aa1e x86_64/mozilla-js-debugger-1.7.10-1.3.2.x86_64.rpm
658f1bb2368431e44be3fe50db19ec5d x86_64/mozilla-dom-inspector-1.7.10-1.3.2.x86_64.rpm
c2afc4080cca4a45fbe42b74cbfe69f8 x86_64/debug/mozilla-debuginfo-1.7.10-1.3.2.x86_64.rpm
194e0ef4b161387897729d7edef996df x86_64/mozilla-nspr-1.7.10-1.3.2.i386.rpm
e08421fc25692f832b7044bcf0101f73 x86_64/mozilla-nss-1.7.10-1.3.2.i386.rpm
6514c4e91521e86fed53128b267673c7 i386/mozilla-1.7.10-1.3.2.i386.rpm
194e0ef4b161387897729d7edef996df i386/mozilla-nspr-1.7.10-1.3.2.i386.rpm
b3d721c87a275315f46ad4bcd2910e0e i386/mozilla-nspr-devel-1.7.10-1.3.2.i386.rpm
e08421fc25692f832b7044bcf0101f73 i386/mozilla-nss-1.7.10-1.3.2.i386.rpm
f02f5be7053f9806f64bd42f3193cfc9 i386/mozilla-nss-devel-1.7.10-1.3.2.i386.rpm
e9183d1ef57b9999980de318fae7be68 i386/mozilla-devel-1.7.10-1.3.2.i386.rpm
d499b6e6170033ec28fa2cd9b6548fb6 i386/mozilla-mail-1.7.10-1.3.2.i386.rpm
d469f6a420bbc48448eabb3892d16e42 i386/mozilla-chat-1.7.10-1.3.2.i386.rpm
0d0e1ad6a15156da6ec62da999de5eed i386/mozilla-js-debugger-1.7.10-1.3.2.i386.rpm
39c8d0d976d87d86bed44b1136ec1272 i386/mozilla-dom-inspector-1.7.10-1.3.2.i386.rpm
c7a91e7aca4db4452c25cc7e2389c4fb i386/debug/mozilla-debuginfo-1.7.10-1.3.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
