Synopsis:          Critical: firefox security update
Issue Date:        2013-02-19
CVE Numbers:       CVE-2013-0783
                    CVE-2013-0775
                    CVE-2013-0776
                    CVE-2013-0780
                    CVE-2013-0782
--

Several flaws were found in the processing of malformed web content. A 
web page
containing malicious content could cause Firefox to crash or, potentially,
execute arbitrary code with the privileges of the user running Firefox.
(CVE-2013-0775, CVE-2013-0780, CVE-2013-0782, CVE-2013-0783)

It was found that, after canceling a proxy server's authentication 
prompt, the
address bar continued to show the requested site's address. An attacker 
could
use this flaw to conduct phishing attacks by tricking a user into believing
they are viewing a trusted site. (CVE-2013-0776)

Note that due to a Kerberos credentials change, the following configuration
steps may be required when using Firefox 17.0.3 ESR with the Enterprise
Identity Management (IPA) web interface:

Important: Firefox 17 is not completely backwards-compatible with all 
Mozilla
add-ons and Firefox plug-ins that worked with Firefox 10.0. Firefox 17 
checks
compatibility on first-launch, and, depending on the individual 
configuration
and the installed add-ons and plug-ins, may disable said Add-ons and 
plug-ins,
or attempt to check for updates and upgrade them. Add-ons and plug-ins 
may have
to be manually updated.

After installing the update, Firefox must be restarted for the changes to
take effect.
--

SL5
   x86_64
     devhelp-0.12-23.el5_9.i386.rpm
     devhelp-0.12-23.el5_9.x86_64.rpm
     devhelp-debuginfo-0.12-23.el5_9.i386.rpm
     devhelp-debuginfo-0.12-23.el5_9.x86_64.rpm
     firefox-17.0.3-1.el5_9.i386.rpm
     firefox-17.0.3-1.el5_9.x86_64.rpm
     firefox-debuginfo-17.0.3-1.el5_9.i386.rpm
     firefox-debuginfo-17.0.3-1.el5_9.x86_64.rpm
     xulrunner-17.0.3-1.el5_9.i386.rpm
     xulrunner-17.0.3-1.el5_9.x86_64.rpm
     xulrunner-debuginfo-17.0.3-1.el5_9.i386.rpm
     xulrunner-debuginfo-17.0.3-1.el5_9.x86_64.rpm
     yelp-2.16.0-30.el5_9.x86_64.rpm
     yelp-debuginfo-2.16.0-30.el5_9.x86_64.rpm
     devhelp-devel-0.12-23.el5_9.i386.rpm
     devhelp-devel-0.12-23.el5_9.x86_64.rpm
     xulrunner-devel-17.0.3-1.el5_9.i386.rpm
     xulrunner-devel-17.0.3-1.el5_9.x86_64.rpm
   i386
     devhelp-0.12-23.el5_9.i386.rpm
     devhelp-debuginfo-0.12-23.el5_9.i386.rpm
     firefox-17.0.3-1.el5_9.i386.rpm
     firefox-debuginfo-17.0.3-1.el5_9.i386.rpm
     xulrunner-17.0.3-1.el5_9.i386.rpm
     xulrunner-debuginfo-17.0.3-1.el5_9.i386.rpm
     yelp-2.16.0-30.el5_9.i386.rpm
     yelp-debuginfo-2.16.0-30.el5_9.i386.rpm
     devhelp-devel-0.12-23.el5_9.i386.rpm
     xulrunner-devel-17.0.3-1.el5_9.i386.rpm
SL6
   x86_64
     firefox-17.0.3-1.el6_3.i686.rpm
     firefox-17.0.3-1.el6_3.x86_64.rpm
     firefox-debuginfo-17.0.3-1.el6_3.i686.rpm
     firefox-debuginfo-17.0.3-1.el6_3.x86_64.rpm
     libproxy-0.3.0-4.el6_3.i686.rpm
     libproxy-0.3.0-4.el6_3.x86_64.rpm
     libproxy-bin-0.3.0-4.el6_3.x86_64.rpm
     libproxy-debuginfo-0.3.0-4.el6_3.i686.rpm
     libproxy-debuginfo-0.3.0-4.el6_3.x86_64.rpm
     libproxy-python-0.3.0-4.el6_3.x86_64.rpm
     xulrunner-17.0.3-1.el6_3.i686.rpm
     xulrunner-17.0.3-1.el6_3.x86_64.rpm
     xulrunner-debuginfo-17.0.3-1.el6_3.i686.rpm
     xulrunner-debuginfo-17.0.3-1.el6_3.x86_64.rpm
     yelp-2.28.1-17.el6_3.x86_64.rpm
     yelp-debuginfo-2.28.1-17.el6_3.x86_64.rpm
     libproxy-devel-0.3.0-4.el6_3.i686.rpm
     libproxy-devel-0.3.0-4.el6_3.x86_64.rpm
     libproxy-gnome-0.3.0-4.el6_3.x86_64.rpm
     libproxy-kde-0.3.0-4.el6_3.x86_64.rpm
     libproxy-mozjs-0.3.0-4.el6_3.x86_64.rpm
     libproxy-webkit-0.3.0-4.el6_3.x86_64.rpm
     xulrunner-devel-17.0.3-1.el6_3.i686.rpm
     xulrunner-devel-17.0.3-1.el6_3.x86_64.rpm
   i386
     firefox-17.0.3-1.el6_3.i686.rpm
     firefox-debuginfo-17.0.3-1.el6_3.i686.rpm
     libproxy-0.3.0-4.el6_3.i686.rpm
     libproxy-bin-0.3.0-4.el6_3.i686.rpm
     libproxy-debuginfo-0.3.0-4.el6_3.i686.rpm
     libproxy-python-0.3.0-4.el6_3.i686.rpm
     xulrunner-17.0.3-1.el6_3.i686.rpm
     xulrunner-debuginfo-17.0.3-1.el6_3.i686.rpm
     yelp-2.28.1-17.el6_3.i686.rpm
     yelp-debuginfo-2.28.1-17.el6_3.i686.rpm
     libproxy-devel-0.3.0-4.el6_3.i686.rpm
     libproxy-gnome-0.3.0-4.el6_3.i686.rpm
     libproxy-kde-0.3.0-4.el6_3.i686.rpm
     libproxy-mozjs-0.3.0-4.el6_3.i686.rpm
     libproxy-webkit-0.3.0-4.el6_3.i686.rpm
     xulrunner-devel-17.0.3-1.el6_3.i686.rpm

- Scientific Linux Development Team