** MFSA-2006-57 ** Two flaws were found in the way Firefox processed certain regular expressions. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. (CVE-2006-4565, CVE-2006-4566) CVE-2006-4565 https://bugzilla.mozilla.org/show_bug.cgi?id=346090 CVE-2006-4566 https://bugzilla.mozilla.org/show_bug.cgi?id=346794 ** MFSA-2006-58 ** A flaw was found in the Firefox auto-update verfication system. An attacker who has the ability to spoof a victim's DNS could get Firefox to download and install malicious code. In order to exploit this issue an attacker would also need to get a victim to previously accept an unverifiable certificate. DNS. (CVE-2006-4567) CVE-2006-4567 https://bugzilla.mozilla.org/show_bug.cgi?id=340198 ** MFSA-2006-59 ** A flaw was found in the handling of Javascript timed events. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. (CVE-2006-4253) https://bugzilla.mozilla.org/show_bug.cgi?id=345071 https://bugzilla.mozilla.org/show_bug.cgi?id=348514 ** MFSA-2006-60 ** Daniel Bleichenbacher recently described an implementation error in RSA signature verification. For RSA keys with exponent 3 it is possible for an attacker to forge a signature that which would be incorrectly verified by the NSS library. Firefox as shipped trusts several root Certificate Authorities that use exponent 3. An attacker could have created a carefully crafted SSL certificate which be incorrectly trusted when their site was visited by a victim. (CVE-2006-4340) ** MFSA-2006-63 ** A flaw was found in Thunderbird triggered when a HTML message contained a remote image pointing to a XBL script. An attacker could have created a carefully crafted message which would execute JavaScript if certain actions were performed on the email by the recipient, even if JavaScript was disabled. (CVE-2006-4570) https://bugzilla.mozilla.org/show_bug.cgi?id=346984 ** MFSA-2006-64 ** A number of flaws were found in Firefox. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. (CVE-2006-4571)
now public, removing embargo
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2006-0677.html