From Mageia wiki
Jump to: navigation, search

MGASA-2012-0336

Date: November 21st, 2012
Affected releases: 1


Description:
Updated nspluginwrapper package fixes security vulnerability:

It was not possible for plug-ins wrapped by nspluginwrapper to discover
whether the browser was running in Private Browsing mode. This flaw could
lead to plug-ins wrapped by nspluginwrapper using normal mode while they
were expected to run in Private Browsing mode (CVE-2011-2486).


Updated Packages:
nspluginwrapper-1.4.4-1.mga1


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2486
https://rhn.redhat.com/errata/RHSA-2012-1459.html
https://bugs.mageia.org/show_bug.cgi?id=8071