USN-690-1: Firefox and xulrunner vulnerabilities Post: 302269488

Sponsored Content

Special Forums Cybersecurity Security Advisories (RSS) USN-690-1: Firefox and xulrunner vulnerabilities Post 302269488 by Linux Bot on Wednesday 17th of December 2008 07:10:07 PM

12-17-2008

Registered User

USN-690-1: Firefox and xulrunner vulnerabilities

Referenced CVEs:
CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5505, CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513

Description:
===========================================================Ubuntu Security Notice USN-690-1 December 17, 2008firefox-3.0, xulrunner-1.9 vulnerabilitiesCVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5505,CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510,CVE-2008-5511, CVE-2008-5512, CVE-2008-5513===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.04 LTSUbuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.04 LTS: firefox-3.0 3.0.5+nobinonly-0ubuntu0.8.04.1 xulrunner-1.9 1.9.0.5+nobinonly-0ubuntu0.8.04.1Ubuntu 8.10: abrowser 3.0.5+nobinonly-0ubuntu0.8.10.1 firefox-3.0 3.0.5+nobinonly-0ubuntu0.8.10.1 xulrunner-1.9 1.9.0.5+nobinonly-0ubuntu0.8.10.1After a standard system upgrade you need to restart Firefox and anyapplications that use xulrunner, such as Epiphany, to effect the necessarychanges.Details follow:Several flaws were discovered in the browser engine. These problems could allowan attacker to crash the browser and possibly execute arbitrary code with userprivileges. (CVE-2008-5500, CVE-2008-5501, CVE-2008-5502)It was discovered that Firefox did not properly handle persistent cookie data.If a user were tricked into opening a malicious website, an attacker couldwrite persistent data in the user's browser and track the user across browsingsessions. (CVE-2008-5505)Marius Schilder discovered that Firefox did not properly handle redirects toan outside domain when an XMLHttpRequest was made to a same-origin resource.It's possible that sensitive information could be revealed in theXMLHttpRequest response. (CVE-2008-5506)Chris Evans discovered that Firefox did not properly protect a user's data whenaccessing a same-domain Javascript URL that is redirected to an unparsableJavascript off-site resource. If a user were tricked into opening a maliciouswebsite, an attacker may be able to steal a limited amount of private data.(CVE-2008-5507)Chip Salzenberg, Justin Schuh, Tom Cross, and Peter William discovered Firefoxdid not properly parse URLs when processing certain control characters.(CVE-2008-5508)Kojima Hajime discovered that Firefox did not properly handle an escaped nullcharacter. An attacker may be able to exploit this flaw to bypass scriptsanitization. (CVE-2008-5510)Several flaws were discovered in the Javascript engine. If a user were trickedinto opening a malicious website, an attacker could exploit this to executearbitrary Javascript code within the context of another website or with chromeprivileges. (CVE-2008-5511, CVE-2008-5512)Flaws were discovered in the session-restore feature of Firefox. If a user weretricked into opening a malicious website, an attacker could exploit this toperform cross-site scripting attacks or execute arbitrary Javascript code withchrome privileges. (CVE-2008-5513)

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

LEARN ABOUT MOJAVE

datetime::locale::ug5.18

DateTime::Locale::ug(3) 				User Contributed Perl Documentation				   DateTime::Locale::ug(3)

NAME

       DateTime::Locale::ug

SYNOPSIS

	 use DateTime;

	 my $dt = DateTime->now( locale => 'ug' );
	 print $dt->month_name();

DESCRIPTION

       This is the DateTime locale package for Uighur.

DATA

       This locale inherits from the DateTime::Locale::root locale.

       It contains the following data.

   Days
       Wide (format)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

       Abbreviated (format)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

       Narrow (format)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

       Wide (stand-alone)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

       Abbreviated (stand-alone)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

       Narrow (stand-alone)

	 2
	 3
	 4
	 5
	 6
	 7
	 1

   Months
       Wide (format)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

       Abbreviated (format)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

       Narrow (format)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

       Wide (stand-alone)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

       Abbreviated (stand-alone)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

       Narrow (stand-alone)

	 1
	 2
	 3
	 4
	 5
	 6
	 7
	 8
	 9
	 10
	 11
	 12

   Quarters
       Wide (format)

	 Q1
	 Q2
	 Q3
	 Q4

       Abbreviated (format)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (format)

	 1
	 2
	 3
	 4

       Wide (stand-alone)

	 Q1
	 Q2
	 Q3
	 Q4

       Abbreviated (stand-alone)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (stand-alone)

	 1
	 2
	 3
	 4

   Eras
       Wide

	 BCE
	 CE

       Abbreviated

	 BCE
	 CE

       Narrow

	 BCE
	 CE

   Date Formats
       Full

	  2008-02-05T18:30:30 = 3, 2008 2 05
	  1995-12-22T09:05:02 = 6, 1995 12 22
	 -0010-09-15T04:44:23 = 7, -10 9 15

       Long

	  2008-02-05T18:30:30 = 2008 2 5
	  1995-12-22T09:05:02 = 1995 12 22
	 -0010-09-15T04:44:23 = -10 9 15

       Medium

	  2008-02-05T18:30:30 = 2008 2 5
	  1995-12-22T09:05:02 = 1995 12 22
	 -0010-09-15T04:44:23 = -10 9 15

       Short

	  2008-02-05T18:30:30 = 2008-02-05
	  1995-12-22T09:05:02 = 1995-12-22
	 -0010-09-15T04:44:23 = -010-09-15

       Default

	  2008-02-05T18:30:30 = 2008 2 5
	  1995-12-22T09:05:02 = 1995 12 22
	 -0010-09-15T04:44:23 = -10 9 15

   Time Formats
       Full

	  2008-02-05T18:30:30 = 18:30:30 UTC
	  1995-12-22T09:05:02 = 09:05:02 UTC
	 -0010-09-15T04:44:23 = 04:44:23 UTC

       Long

	  2008-02-05T18:30:30 = 18:30:30 UTC
	  1995-12-22T09:05:02 = 09:05:02 UTC
	 -0010-09-15T04:44:23 = 04:44:23 UTC

       Medium

	  2008-02-05T18:30:30 = 18:30:30
	  1995-12-22T09:05:02 = 09:05:02
	 -0010-09-15T04:44:23 = 04:44:23

       Short

	  2008-02-05T18:30:30 = 18:30
	  1995-12-22T09:05:02 = 09:05
	 -0010-09-15T04:44:23 = 04:44

       Default

	  2008-02-05T18:30:30 = 18:30:30
	  1995-12-22T09:05:02 = 09:05:02
	 -0010-09-15T04:44:23 = 04:44:23

   Datetime Formats
       Full

	  2008-02-05T18:30:30 = 3, 2008 2 05 18:30:30 UTC
	  1995-12-22T09:05:02 = 6, 1995 12 22 09:05:02 UTC
	 -0010-09-15T04:44:23 = 7, -10 9 15 04:44:23 UTC

       Long

	  2008-02-05T18:30:30 = 2008 2 5 18:30:30 UTC
	  1995-12-22T09:05:02 = 1995 12 22 09:05:02 UTC
	 -0010-09-15T04:44:23 = -10 9 15 04:44:23 UTC

       Medium

	  2008-02-05T18:30:30 = 2008 2 5 18:30:30
	  1995-12-22T09:05:02 = 1995 12 22 09:05:02
	 -0010-09-15T04:44:23 = -10 9 15 04:44:23

       Short

	  2008-02-05T18:30:30 = 2008-02-05 18:30
	  1995-12-22T09:05:02 = 1995-12-22 09:05
	 -0010-09-15T04:44:23 = -010-09-15 04:44

       Default

	  2008-02-05T18:30:30 = 2008 2 5 18:30:30
	  1995-12-22T09:05:02 = 1995 12 22 09:05:02
	 -0010-09-15T04:44:23 = -10 9 15 04:44:23

   Available Formats
       d (d)

	  2008-02-05T18:30:30 = 5
	  1995-12-22T09:05:02 = 22
	 -0010-09-15T04:44:23 = 15

       EEEd (d EEE)

	  2008-02-05T18:30:30 = 5 3
	  1995-12-22T09:05:02 = 22 6
	 -0010-09-15T04:44:23 = 15 7

       Hm (H:mm)

	  2008-02-05T18:30:30 = 18:30
	  1995-12-22T09:05:02 = 9:05
	 -0010-09-15T04:44:23 = 4:44

       hm (h:mm a)

	  2008-02-05T18:30:30 = 6:30 PM
	  1995-12-22T09:05:02 = 9:05 AM
	 -0010-09-15T04:44:23 = 4:44 AM

       Hms (H:mm:ss)

	  2008-02-05T18:30:30 = 18:30:30
	  1995-12-22T09:05:02 = 9:05:02
	 -0010-09-15T04:44:23 = 4:44:23

       hms (h:mm:ss a)

	  2008-02-05T18:30:30 = 6:30:30 PM
	  1995-12-22T09:05:02 = 9:05:02 AM
	 -0010-09-15T04:44:23 = 4:44:23 AM

       M (L)

	  2008-02-05T18:30:30 = 2
	  1995-12-22T09:05:02 = 12
	 -0010-09-15T04:44:23 = 9

       Md (M-d)

	  2008-02-05T18:30:30 = 2-5
	  1995-12-22T09:05:02 = 12-22
	 -0010-09-15T04:44:23 = 9-15

       MEd (E, M-d)

	  2008-02-05T18:30:30 = 3, 2-5
	  1995-12-22T09:05:02 = 6, 12-22
	 -0010-09-15T04:44:23 = 7, 9-15

       MMM (LLL)

	  2008-02-05T18:30:30 = 2
	  1995-12-22T09:05:02 = 12
	 -0010-09-15T04:44:23 = 9

       MMMd (MMM d)

	  2008-02-05T18:30:30 = 2 5
	  1995-12-22T09:05:02 = 12 22
	 -0010-09-15T04:44:23 = 9 15

       MMMEd (E MMM d)

	  2008-02-05T18:30:30 = 3 2 5
	  1995-12-22T09:05:02 = 6 12 22
	 -0010-09-15T04:44:23 = 7 9 15

       MMMMd (MMMM d)

	  2008-02-05T18:30:30 = 2 5
	  1995-12-22T09:05:02 = 12 22
	 -0010-09-15T04:44:23 = 9 15

       MMMMEd (E MMMM d)

	  2008-02-05T18:30:30 = 3 2 5
	  1995-12-22T09:05:02 = 6 12 22
	 -0010-09-15T04:44:23 = 7 9 15

       ms (mm:ss)

	  2008-02-05T18:30:30 = 30:30
	  1995-12-22T09:05:02 = 05:02
	 -0010-09-15T04:44:23 = 44:23

       y (y)

	  2008-02-05T18:30:30 = 2008
	  1995-12-22T09:05:02 = 1995
	 -0010-09-15T04:44:23 = -10

       yM (y-M)

	  2008-02-05T18:30:30 = 2008-2
	  1995-12-22T09:05:02 = 1995-12
	 -0010-09-15T04:44:23 = -10-9

       yMEd (EEE, y-M-d)

	  2008-02-05T18:30:30 = 3, 2008-2-5
	  1995-12-22T09:05:02 = 6, 1995-12-22
	 -0010-09-15T04:44:23 = 7, -10-9-15

       yMMM (y MMM)

	  2008-02-05T18:30:30 = 2008 2
	  1995-12-22T09:05:02 = 1995 12
	 -0010-09-15T04:44:23 = -10 9

       yMMMEd (EEE, y MMM d)

	  2008-02-05T18:30:30 = 3, 2008 2 5
	  1995-12-22T09:05:02 = 6, 1995 12 22
	 -0010-09-15T04:44:23 = 7, -10 9 15

       yMMMM (y MMMM)

	  2008-02-05T18:30:30 = 2008 2
	  1995-12-22T09:05:02 = 1995 12
	 -0010-09-15T04:44:23 = -10 9

       yQ (y Q)

	  2008-02-05T18:30:30 = 2008 1
	  1995-12-22T09:05:02 = 1995 4
	 -0010-09-15T04:44:23 = -10 3

       yQQQ (y QQQ)

	  2008-02-05T18:30:30 = 2008 Q1
	  1995-12-22T09:05:02 = 1995 Q4
	 -0010-09-15T04:44:23 = -10 Q3

       yyQ (Q yy)

	  2008-02-05T18:30:30 = 1 08
	  1995-12-22T09:05:02 = 4 95
	 -0010-09-15T04:44:23 = 3 -10

   Miscellaneous
       Prefers 24 hour time?

       Yes

       Local first day of the week

       2

SUPPORT

       See DateTime::Locale.

AUTHOR

       Dave Rolsky <autarch@urth.org>

COPYRIGHT

       Copyright (c) 2008 David Rolsky. All rights reserved. This program is free software; you can redistribute it and/or modify it under the
       same terms as Perl itself.

       This module was generated from data provided by the CLDR project, see the LICENSE.cldr in this distribution for details on the CLDR data's
       license.

perl v5.18.2							    2017-10-06						   DateTime::Locale::ug(3)