--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : yelp
Product : Fedora 8
Version : 2.20.0
Release : 6.fc8
URL : http://live.gnome.org/Yelp
Summary : A system documentation reader from the Gnome project
Description :
Yelp is the Gnome 2 help/documentation browser. It is designed
to help you browse all the documentation on your system in
one central tool.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.0-6
- Rebuild against newer gecko
* Mon Nov 5 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.20.0-5
- Fix a crash in search (#361041)
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.0-4
- Rebuild against new firefox
* Sun Nov 4 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.20.0-3
- Fix a crash when loading the rarian docs
--------------------------------------------------------------------------------
Updated packages:
411dbbed76fa4f5e49bda42971e20721accdf327 yelp-debuginfo-2.20.0-6.fc8.ppc64.rpm
414a77884d93ecde459aad0833e76b455c636ffb yelp-2.20.0-6.fc8.ppc64.rpm
b8095b6ecdb47570ee7b2032515e0dcedb0d871e yelp-debuginfo-2.20.0-6.fc8.i386.rpm
eda1926a021f9ed629e69e0f617ee8987394a806 yelp-2.20.0-6.fc8.i386.rpm
ab6b92022e5a2866624c7093982ae252d94c2052 yelp-debuginfo-2.20.0-6.fc8.x86_64.rpm
c99ecfcb5f63cfd8ad26241af5d061d50615f4b9 yelp-2.20.0-6.fc8.x86_64.rpm
1375710fa2e141ff34da214195230a1e58ce1e93 yelp-debuginfo-2.20.0-6.fc8.ppc.rpm
2f056ed4fa5f8cb58c772c50d113b1ac6b1dbdbc yelp-2.20.0-6.fc8.ppc.rpm
620f1becf6c545183b0b57cba9b7422a2083eed0 yelp-2.20.0-6.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update yelp'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : kazehakase
Product : Fedora 8
Version : 0.5.0
Release : 1.fc8.2
URL : http://kazehakase.sourceforge.jp/
Summary : Kazehakase browser
Description :
Kazehakase is a Web browser which aims to provide
a user interface that is truly user-friendly & fully customizable.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com>
- Rebuild against newer gecko
* Tue Nov 6 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1.dist.1
- Rebuild against new gecko engine
- Switch to use gecko virtual dependency (bug 352091)
* Mon Oct 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1
- 0.5.0
--------------------------------------------------------------------------------
Updated packages:
c3553198fb8c18d88bd878bd5bfe1a784f9a70cb kazehakase-debuginfo-0.5.0-1.fc8.2.ppc64.rpm
f2e7f9507d79c2ea71b738b8737fab52ee638a64 kazehakase-ruby-0.5.0-1.fc8.2.ppc64.rpm
3b2fa9624bc22e9d518ea204f9eca1bce49a39b8 kazehakase-0.5.0-1.fc8.2.ppc64.rpm
dc42757288737b4b74160d37e1616d4715c73eb2 kazehakase-hyperestraier-0.5.0-1.fc8.2.ppc64.rpm
923ba12a0ded6fb9b8fd883f1ba41ee7857bbb30 kazehakase-0.5.0-1.fc8.2.i386.rpm
f712259dc78c58171ec2a9433bcb76caf115b9f1 kazehakase-debuginfo-0.5.0-1.fc8.2.i386.rpm
fa7773159bca526f07712d0b9ecb100e83835e2c kazehakase-hyperestraier-0.5.0-1.fc8.2.i386.rpm
85052b2c4d415130e2c60e104cf398d72231d8e7 kazehakase-ruby-0.5.0-1.fc8.2.i386.rpm
6cd896ef79f3dbe740692f12d4048d27852e5ecd kazehakase-ruby-0.5.0-1.fc8.2.x86_64.rpm
dcf8c8b481127175f78764a5460518bdaef8b31d kazehakase-hyperestraier-0.5.0-1.fc8.2.x86_64.rpm
a7f63aaecb60ff43b00a4dc142e3d83e73de9c93 kazehakase-debuginfo-0.5.0-1.fc8.2.x86_64.rpm
af1c7925a8770b4bfd1c1c24f645fbd9b7f18214 kazehakase-0.5.0-1.fc8.2.x86_64.rpm
ffd11f8e7f92e4272389052ff69595d89b89a77f kazehakase-debuginfo-0.5.0-1.fc8.2.ppc.rpm
a7a27eb3d32376803be06b14f2de561f3eb68771 kazehakase-hyperestraier-0.5.0-1.fc8.2.ppc.rpm
0c596fd91e235f3f08e0273dc4e33767f1f97b2f kazehakase-0.5.0-1.fc8.2.ppc.rpm
510de654471f31c01c24ee738f633f4f35ae30d0 kazehakase-ruby-0.5.0-1.fc8.2.ppc.rpm
db85be03f7c2b7a18a2447e96c17dce60453e59e kazehakase-0.5.0-1.fc8.2.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update kazehakase'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 8
Version : 1.0.0
Release : 1.27.fc8
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.27
- Rebuild against newer gecko
* Sat Nov 10 2007 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.26
- build for firefox-2.0.0.9
--------------------------------------------------------------------------------
Updated packages:
1098badd81d87af9ed080551c1dedb1a9fc961ac chmsee-debuginfo-1.0.0-1.27.fc8.ppc64.rpm
ffe4cbeffa001eacd579c4ae544be9d8737e8410 chmsee-1.0.0-1.27.fc8.ppc64.rpm
da2e1d11d2d8e51fcaac1f4549ec7f8d259f1997 chmsee-1.0.0-1.27.fc8.i386.rpm
0ba5bc2d8fe62c4fb12ed2c92ef7d192952142dc chmsee-debuginfo-1.0.0-1.27.fc8.i386.rpm
7d86377cfcc69f74de8b85782d40fca2c781a972 chmsee-1.0.0-1.27.fc8.x86_64.rpm
613d8714e4714568a25161c85b98a8fbfa26f2fa chmsee-debuginfo-1.0.0-1.27.fc8.x86_64.rpm
7481912d0d867466ddb6c8258f4fa72a98d36cc5 chmsee-debuginfo-1.0.0-1.27.fc8.ppc.rpm
223946638645c5e418705f6ae7f6ec329e42917d chmsee-1.0.0-1.27.fc8.ppc.rpm
d271ecc07bc2cb5e58033f1b2581aa991e3db155 chmsee-1.0.0-1.27.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : gnome-web-photo
Product : Fedora 8
Version : 0.3
Release : 7.fc8
URL : http://ftp.gnome.org/pub/GNOME/sources/gnome-web-photo/0.3/
Summary : HTML pages thumbnailer
Description :
gnome-web-photo contains a thumbnailer that will be used by GNOME applications,
including the file manager, to generate screenshots of web pages.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 0.3-7
- Rebuild against newer gecko
* Tue Nov 6 2007 - Martin Stransky <stransky(a)redhat.com> - 0.3-6
- Rebuild for new Gecko
* Thu Oct 25 2007 - Bastien Nocera <bnocera(a)redhat.com> - 0.3-5
- Rebuild for new Gecko, tighten dependencies
--------------------------------------------------------------------------------
Updated packages:
1e17398bb0a11744717e897c21c835ba87430208 gnome-web-photo-0.3-7.fc8.ppc64.rpm
c8da59676fbb4f09728a8c13a812a7208c498798 gnome-web-photo-debuginfo-0.3-7.fc8.ppc64.rpm
f85d80545788f59ab94daa979a72776c7dbcaedc gnome-web-photo-debuginfo-0.3-7.fc8.i386.rpm
850f154f24ef90d19151576aee45732e9c18a8dc gnome-web-photo-0.3-7.fc8.i386.rpm
9f811f781de9eb0d10ee28661ba8588af8615f00 gnome-web-photo-0.3-7.fc8.x86_64.rpm
27892f23d3d39b4328768150f20417a0db055a8e gnome-web-photo-debuginfo-0.3-7.fc8.x86_64.rpm
e0db74feb2ce786781ae7b3c36571e4c96e9dfdd gnome-web-photo-0.3-7.fc8.ppc.rpm
058cd360b309ef91f590dcf21b0afc4f20897eb2 gnome-web-photo-debuginfo-0.3-7.fc8.ppc.rpm
d7fc4625a0b233c12264fa1f35e06ba9e4c5e8fd gnome-web-photo-0.3-7.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-web-photo'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 8
Version : 2.20.1
Release : 6.fc8
URL : http://www.gnome.org/projects/epiphany/
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-6
- Rebuild against newer gecko
* Mon Nov 19 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-5
- Updated wrapper patch
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-4
- Rebuild against new firefox
--------------------------------------------------------------------------------
Updated packages:
6ebbc88d17dc9a942cd960f671be4f34a34268e7 epiphany-devel-2.20.1-6.fc8.ppc64.rpm
3747ad508ecb969ae8faf46301c765d576e72c24 epiphany-2.20.1-6.fc8.ppc64.rpm
bd545d2ac069b8141372ee7449d20c87202f65d4 epiphany-debuginfo-2.20.1-6.fc8.ppc64.rpm
b0cae51892818fe5472137d4c2f561f915cf6345 epiphany-devel-2.20.1-6.fc8.i386.rpm
5ddbda747bf074e99cd742d9a0f46b607f458249 epiphany-2.20.1-6.fc8.i386.rpm
72c3e2996dd5beeb9b690d37e291b60707de74c8 epiphany-debuginfo-2.20.1-6.fc8.i386.rpm
7a58ad9b9d68911341743bbaaabfc6ad14f4dc9f epiphany-devel-2.20.1-6.fc8.x86_64.rpm
b488f41252180ca9754f4421bae9e6a741707b1f epiphany-debuginfo-2.20.1-6.fc8.x86_64.rpm
dc606fb7c23e1e781cb0343caa6a109bb68ea824 epiphany-2.20.1-6.fc8.x86_64.rpm
1fb01cc3d0716cc551ee5f903a8d29f9d459bb86 epiphany-debuginfo-2.20.1-6.fc8.ppc.rpm
2a4c108de45cd1221ad47a6ee16d62c8f12b9ea0 epiphany-devel-2.20.1-6.fc8.ppc.rpm
776db393eb2a7e0b7be452d0e0af06f93f4e7021 epiphany-2.20.1-6.fc8.ppc.rpm
32aba352b4827327c8e83265cfb74e98b4efd087 epiphany-2.20.1-6.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 8
Version : 1.0
Release : 2.fc8
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 1.0-2
- Build against gecko-libs 1.8.1.10 (firefox 2.0.0.10)
* Fri Nov 16 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 1.0-1
- Update to latest upstream (1.0).
* Fri Nov 9 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.9-1
- Update to latest upstream (0.9.9.9)
- Build against gecko-libs 1.8.1.9 (firefox 2.0.0.9)
- Include xine_extractor in package (thanks to Jason Farrell)
- Drop Miro-setup.py.patch
* Thu Nov 1 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-6
- Update patch with workaround suggested on:
http://bugzilla.pculture.org/show_bug.cgi?id=8579
* Wed Oct 31 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-5
- Add setup.py patch to ignore call to svn.
* Tue Oct 30 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-3
- Add BuildRequires: libXv-devel
- Drop dbus patch
* Sun Oct 28 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-1
- Update to latest upstream (0.9.9.1)
* Fri Oct 26 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.8.1-8
- Replace Requires and BuildRequires for firefox with gecko to
smooth eventual xulrunner transition
--------------------------------------------------------------------------------
Updated packages:
33e426aa00d7d3fe6cfa1d68bfe6991e9c4d9e9e Miro-1.0-2.fc8.ppc64.rpm
f1775cf9f417e5156b747c33f6f8d3becf268ed1 Miro-debuginfo-1.0-2.fc8.ppc64.rpm
8f1ee919c1be2606b834e04c4b1c41ccc1ab012f Miro-debuginfo-1.0-2.fc8.i386.rpm
771d16d6b4a1195c1c5070b0ff8f504d31be7828 Miro-1.0-2.fc8.i386.rpm
72ecb19fd4d977aab37138b0d017a4e70a003dee Miro-1.0-2.fc8.x86_64.rpm
31b4366a43481de24f9bacd49ad8575bd6963abb Miro-debuginfo-1.0-2.fc8.x86_64.rpm
b20d60ac66207d87e1f28902d537dd5853e5f4c1 Miro-1.0-2.fc8.ppc.rpm
25895aa5c9f6804d4979e05f7d0ebba05df2f846 Miro-debuginfo-1.0-2.fc8.ppc.rpm
aeb3745db1cb0f00de7ca333cb7e7686cdd83934 Miro-1.0-2.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : liferea
Product : Fedora 8
Version : 1.4.8
Release : 2.fc8
URL : http://liferea.sourceforge.net/
Summary : An RSS/RDF feed reader
Description :
Liferea (Linux Feed Reader) is an RSS/RDF feed reader.
It's intended to be a clone of the Windows-only FeedReader.
It can be used to maintain a list of subscribed feeds,
browse through their items, and show their contents.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.4.8-2
- Rebuild against newer gecko
--------------------------------------------------------------------------------
Updated packages:
f3a8735b848a146e641a20e965ee53244d72f7e2 liferea-1.4.8-2.fc8.ppc64.rpm
da23342ccb1fac381d58cab73641cbeaad04c505 liferea-debuginfo-1.4.8-2.fc8.ppc64.rpm
1cb65446c5a6359d58d90139a9daa202177f87b8 liferea-1.4.8-2.fc8.i386.rpm
d57bac3e4f41aac2049cf9c71a049799e497cadd liferea-debuginfo-1.4.8-2.fc8.i386.rpm
74e1dba00d978679318a0b76a924aaf853c41d86 liferea-debuginfo-1.4.8-2.fc8.x86_64.rpm
3a3f550afa0952d0bb80d45b59d113442800dc24 liferea-1.4.8-2.fc8.x86_64.rpm
a220d8f3ddd999771c319323b36a2a9462a9604c liferea-debuginfo-1.4.8-2.fc8.ppc.rpm
a5137b0c65cea0d13a1b9e4b8a91ae3240240095 liferea-1.4.8-2.fc8.ppc.rpm
26f714a59b150ac7fadbab70cf1410fbd6551c18 liferea-1.4.8-2.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update liferea'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3602
2007-11-29 01:46:44.661328
--------------------------------------------------------------------------------
Name : fxload
Product : Fedora 8
Version : 2002_04_11
Release : 6.fc8
URL : http://linux-hotplug.sourceforge.net/
Summary : A helper program to download firmware into FX and FX2 EZ-USB devices
Description :
This program is conveniently able to download firmware into FX and FX2
EZ-USB devices, as well as the original AnchorChips EZ-USB. It is
intended to be invoked by udev scripts when the unprogrammed device
appears on the bus.
--------------------------------------------------------------------------------
Update Information:
This program is conveniently able to download firmware into FX and FX2 EZ-USB devices, as well as the original AnchorChips EZ-USB. It is intended to be invoked by udev scripts when the unprogrammed device appears on the bus.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #386341 - Review Request: fxload - A helper program to download firmware into FX and FX2 EZ-USB devices
https://bugzilla.redhat.com/show_bug.cgi?id=386341
--------------------------------------------------------------------------------
Updated packages:
bb4fc916d5ac7a89365cd009e7198d770d4000df fxload-2002_04_11-6.fc8.ppc64.rpm
f325927dd25639b5e4e610913e9d5a896258ac1a fxload-debuginfo-2002_04_11-6.fc8.ppc64.rpm
27b0b8f5e50d475df0485a8a8d2e356ac04bce2c fxload-2002_04_11-6.fc8.i386.rpm
ed35b6bfc6758ead147e073067cd0e3316591e5b fxload-debuginfo-2002_04_11-6.fc8.i386.rpm
8036a2e6e7a1a66379793c151d179896706df1d9 fxload-2002_04_11-6.fc8.x86_64.rpm
7b7e1f15217d7cf28e94f868969cccfc5b4664e9 fxload-debuginfo-2002_04_11-6.fc8.x86_64.rpm
475326ef2ec07b05b62aec148db6ddee9a6c65c6 fxload-debuginfo-2002_04_11-6.fc8.ppc.rpm
1660ae597de011e4b6bef2034cf20c130e81afe2 fxload-2002_04_11-6.fc8.ppc.rpm
85e59a3439fea157a2883e24600755c1fc0deb69 fxload-2002_04_11-6.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update fxload'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3959
2007-11-29 01:46:18.605013
--------------------------------------------------------------------------------
Name : gfs-didot-fonts
Product : Fedora 7
Version : 20070616
Release : 2.fc7
URL : http://www.greekfontsociety.org/pages/en_typefaces20th.html
Summary : GFS Didot fonts
Description :
Didot’s type was the base for a new font, GFS Didot (1994) which was designed
by Takis Katsoulidis, and digitised by George Matthiopoulos. The typeface is
accompanied by a matching latin alphabet based on Hermann Zapf’s Palatino.
--------------------------------------------------------------------------------
Update Information:
Greek Font Society OTF fonts
--------------------------------------------------------------------------------
Updated packages:
317bd1a7158dcd3e87cb132751eeed6823e765f7 gfs-didot-fonts-20070616-2.fc7.noarch.rpm
3224b7fbe6a094b74e16d843c6cbeb2acce92f84 gfs-didot-fonts-20070616-2.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gfs-didot-fonts'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------