Security bugs are reported here via bugzilla

[Ladislav Hagara <ladislav.hagara AT unob.cz>]

Description:
A vulnerability has been reported in Firefox, which can be exploited by 
malicious people to cause a DoS (Denial of Service) and potentially 
compromise a user's system.

The vulnerability is caused due to a reference to a deleted object when 
designMode is enabled. This can be exploited to corrupt the memory and 
cause a crash by calling the "contentWindow.focus()" method on a 
container with specially crafted content.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in versions 1.5 through 1.5.0.2.

Solution:
Update to version 1.5.0.3.
http://www.mozilla.com/firefox/




For more info:
http://www.mozilla.org/security/announce/2006/mfsa2006-30.html
http://secunia.com/advisories/19802/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1993



-----
All firefox users using devel, test and stable-rc griomoire should 
update to version 1.5.0.3. Users using stable grimoire (firefox 1.0.8) 
are not affected.


# sorcery system-update

or

# scribe update
# cast ethereal

or

# scribe update
# sorcery queue-security
# cast --queue


--
Ladislav Hagara