Red Hat Security Advisory: firefox security update

CVE-2010-0654 — firefox: cross-domain information disclosure CVE-2010-1205 — libpng: out-of-bounds memory write CVE-2010-1206 — Firefox: Spoofing attacks via vectors involving 'No Content' status code or via a windows.stop call CVE-2010-1207 — Mozilla Same-origin bypass using canvas context CVE-2010-1208 — Mozilla DOM attribute cloning remote code execution vulnerability CVE-2010-1209 — Mozilla Use-after-free error in NodeIterator CVE-2010-1210 — Mozilla Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish CVE-2010-1211 — Mozilla miscellaneous memory safety hazards CVE-2010-1212 — Mozilla miscellaneous memory safety hazards CVE-2010-1213 — Mozilla Cross-origin data disclosure via Web Workers and importScripts CVE-2010-1214 — Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability CVE-2010-1215 — Mozilla Arbitrary code execution using SJOW and fast native function CVE-2010-2751 — Mozilla SSL spoofing with history.back() and history.forward() CVE-2010-2752 — nsCSSValue:: Array index integer overflow CVE-2010-2753 — Mozilla nsTreeSelection dangling pointer remote code execution vulnerability CVE-2010-2754 — Mozilla Cross-origin data leakage from script filename in error messages