Saturday, March 28, 2009

Security Updates: Firefox and Glib2

Two security updates has just been released by Pat this weekend along with two other updates, but not related to security. Here are them:
Fri Mar 27 20:30:48 CDT 2009
a/module-init-tools-3.6-i486-2.tgz: Patched modprobe to not complain if /sys is not mounted. This is none of modprobe's business. ;-)

l/glib2-2.18.4-i486-1.tgz: Upgraded to glib-2.18.4 and patched.
This library has been patched to fix overflows that are possible security holes.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4316
(* Security fix *)

l/libxml2-2.7.3-i486-1.tgz: Upgraded to libxml2-2.7.3.

xap/mozilla-firefox-3.0.8-i686-1.tgz:
Upgraded to firefox-3.0.8.
This fixes some security issues.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html
(* Security fix *)