--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 7
Version : 1.0
Release : 2.fc7
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
Updated packages:
23e0fa8a88a85cbf8f823dc5f0519e7a2491b703 Miro-debuginfo-1.0-2.fc7.ppc64.rpm
d825cdd85f81c7fb62ae269cfd384513fc6ebd11 Miro-1.0-2.fc7.ppc64.rpm
c29d578595fd9dc275dd143ea6532f40eff7193b Miro-debuginfo-1.0-2.fc7.i386.rpm
9b56d51df24d56210a35c1eb7038cdc553b9b155 Miro-1.0-2.fc7.i386.rpm
9b604bd9c4daae7fd0d5a8370bf8871afec71968 Miro-1.0-2.fc7.x86_64.rpm
518d593e22bad2afac6dee24a755e1c2e1697ab7 Miro-debuginfo-1.0-2.fc7.x86_64.rpm
02d2b85df45395ebb4c8b2a791ec0fa887b313a7 Miro-1.0-2.fc7.ppc.rpm
bbcf7ba910f08dffdb166972c455671d3a4ce053 Miro-debuginfo-1.0-2.fc7.ppc.rpm
3b8f1234fa010362fa3c2740d5caac3123b3764c Miro-1.0-2.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : kazehakase
Product : Fedora 7
Version : 0.5.0
Release : 1.fc7.2
URL : http://kazehakase.sourceforge.jp/
Summary : Kazehakase browser
Description :
Kazehakase is a Web browser which aims to provide
a user interface that is truly user-friendly & fully customizable.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com>
- Rebuild against newer gecko
* Tue Nov 6 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1.dist.1
- Rebuild against new gecko engine
- Switch to use gecko virtual dependency (bug 352091)
* Mon Oct 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1
- 0.5.0
* Fri Oct 26 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2.svn3312
- Try svn 3312
* Tue Oct 23 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2.dist.1
- Rebuild against new gecko engine.
* Mon Oct 8 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2
- Readd accidentally deleted obsolete_plugin_ver macro
* Sat Sep 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-1
- 0.4.9
* Thu Aug 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.8-1
- 0.4.8
* Wed Aug 22 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-9.svn3228.dist.1
- Mass rebuild (buildID or binutils issue)
* Thu Aug 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-9.svn3228
- Rebuild against new gecko engine.
* Fri Aug 3 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-8.svn3228
- Try svn 3228
- Disable GTK_DISABLE_DEPRECATED for now
- License update
* Sat Jul 21 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-7.svn3227
- Try svn 3227 to drop GLib patch
* Mon Jun 18 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-5
- Rebuild against new gecko engine
* Tue Jun 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-3
- Patch to follow the newest GLib symbol
* Tue Jun 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-2
- Parse GLib version dependency
* Wed May 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-1
- 0.4.7
* Mon May 28 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.6-5.svn3221
- Try svn 3221
--------------------------------------------------------------------------------
Updated packages:
82e063fe8a660c5f1296670a1473d832f3d9ee05 kazehakase-hyperestraier-0.5.0-1.fc7.2.ppc64.rpm
6ee4ceafc9c34e53d2018896f81e2e73c5187f84 kazehakase-0.5.0-1.fc7.2.ppc64.rpm
cb993563c4962e2fd91b905cf0005b0cc8344c36 kazehakase-ruby-0.5.0-1.fc7.2.ppc64.rpm
9bebc755bda08ccdf30338bb2a56b35efa9cf3b4 kazehakase-debuginfo-0.5.0-1.fc7.2.ppc64.rpm
3486c113e87c9342ee7ba568fab8df2f786a4cf1 kazehakase-hyperestraier-0.5.0-1.fc7.2.i386.rpm
ba3ceb17c439792f661818780e04e8c8c28bf8f7 kazehakase-0.5.0-1.fc7.2.i386.rpm
82893d38847765b42593be270ad2bba884cb822d kazehakase-debuginfo-0.5.0-1.fc7.2.i386.rpm
1a800ad16e6d9a269d090899d3a7ef689d571092 kazehakase-ruby-0.5.0-1.fc7.2.i386.rpm
336ea151ea32b67da86b9f6e1aa7ee98b9b05be3 kazehakase-debuginfo-0.5.0-1.fc7.2.x86_64.rpm
869dc3465217f4ef3e65bb5e27d53501808e45fa kazehakase-hyperestraier-0.5.0-1.fc7.2.x86_64.rpm
ce1cc1981048df98c405551937b5acf4221cd6b2 kazehakase-ruby-0.5.0-1.fc7.2.x86_64.rpm
5b415d5efa70c63fd5a511248a85e81a1aea4b27 kazehakase-0.5.0-1.fc7.2.x86_64.rpm
dcc53d73836ecaad096242e7b3f89225cad50f6f kazehakase-ruby-0.5.0-1.fc7.2.ppc.rpm
e0572c9745aca7d38b60ad67f9a8771d5550ec93 kazehakase-hyperestraier-0.5.0-1.fc7.2.ppc.rpm
1f136ffcce6e8c6405dcc2ed67c710858bc06760 kazehakase-debuginfo-0.5.0-1.fc7.2.ppc.rpm
dda1b9ce08a12f4984d53b1fb36e18be2f88976a kazehakase-0.5.0-1.fc7.2.ppc.rpm
d626624233c6ca104cb0f4878513af999ab42bae kazehakase-0.5.0-1.fc7.2.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update kazehakase'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : ruby-gnome2
Product : Fedora 7
Version : 0.16.0
Release : 17.fc7
URL : http://ruby-gnome2.sourceforge.jp/
Summary : Ruby binding of libgnome/libgnomeui-2.x
Description :
This is a set of bindings for the GNOME-2.x libraries for use from Ruby.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> 0.16.0-17
- Rebuild against newer gecko
* Tue Nov 13 2007 Alex Lancaster <alexl(a)users.sourceforge.net> 0.16.0-16
- Fix my typo in BuildRequires
* Tue Nov 13 2007 Alex Lancaster <alexl(a)users.sourceforge.net> 0.16.0-15
- Rebuild against gecko-libs and gecko-devel (firefox 2.0.0.9).
* Thu Oct 25 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-14
- Rebuild against gecko-libs and gecko-devel
* Wed Oct 24 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-13
- Rebuild against new firefox
* Thu Sep 13 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-12
- Newpoppler.patch updated for poppler 0.6
* Sat Sep 8 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-11
- Rebuild against new poppler
- Changed license to LGPLv2+
* Thu Aug 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> 0.16.0-10
- Adjust to GLib 2.14 API + typo fix in glib module
* Thu Aug 9 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-9
- Rebuild against new firefox
* Sat Aug 4 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> 0.16.0-8
- Apply patch extracted from CVS to build glib gtk poppler
* Fri Jul 20 2007 Jesse Keating <jkeating(a)redhat.com> 0.16.0-7
- Rebuild against new firefox
* Thu May 31 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-6
- New gecko engine
--------------------------------------------------------------------------------
Updated packages:
266a8a9045917f069290b92009a3baccf75d3a35 ruby-gnome2-debuginfo-0.16.0-17.fc7.ppc64.rpm
29280934ee2e94b36f9f1ae168454a64f120d9b4 ruby-rsvg-0.16.0-17.fc7.ppc64.rpm
47a8621afdbffed7c8fe0695f44186be4628380a ruby-gtksourceview-0.16.0-17.fc7.ppc64.rpm
1846b47cac1964541c2e36e35b713be50e310ba8 ruby-gnomeprintui2-0.16.0-17.fc7.ppc64.rpm
2f7d5026d50179c0856d83d6f80232874a4f3577 ruby-gnome2-0.16.0-17.fc7.ppc64.rpm
f77e52535ba0f17bc20b5708f30077efb189bcb9 ruby-gtk2-devel-0.16.0-17.fc7.ppc64.rpm
76e8a66586ed6e074ef222ec5409d190039baa43 ruby-gtk2-0.16.0-17.fc7.ppc64.rpm
2d7e1992fe8a16214b3742f4df84348a49e7ba76 ruby-atk-devel-0.16.0-17.fc7.ppc64.rpm
6cd14bc106c0048042d11a07bc35eda24dae0afe ruby-gconf2-0.16.0-17.fc7.ppc64.rpm
9921ef48737646b154d1d9d39ed32a3205e9403c ruby-panelapplet2-0.16.0-17.fc7.ppc64.rpm
ff512c7c52d394cefca89e4fcf8b6ab7f8c2118c ruby-gtkglext-0.16.0-17.fc7.ppc64.rpm
b93016ad55f2256a3c9b36d9c86b3c25e17f190d ruby-gnomecanvas2-0.16.0-17.fc7.ppc64.rpm
a2829b2ddc8c0b85478fcd299d415fcdd466efe9 ruby-pango-devel-0.16.0-17.fc7.ppc64.rpm
3bde9dab7a01a84aa6ebb12e8692d2428a98bbbf ruby-pango-0.16.0-17.fc7.ppc64.rpm
9ee5e42604e0b56800205a52b401da272d6d6ca5 ruby-gnomevfs-0.16.0-17.fc7.ppc64.rpm
297f1264ce1c2ed1d94ade6af876d88ccb700a43 ruby-libart2-devel-0.16.0-17.fc7.ppc64.rpm
40b3269156b58936d8bb2dba5ce4cc00720a0d65 ruby-libart2-0.16.0-17.fc7.ppc64.rpm
6d70cb2b3f3fd0239d9b0e3cf6bd9bb6f96c8658 ruby-glib2-0.16.0-17.fc7.ppc64.rpm
a3dc7ce3bf51a41311a7bb1022b7100011d1ed60 ruby-vte-0.16.0-17.fc7.ppc64.rpm
284b32358f953ae9639bd0adb402b33a168cd061 ruby-atk-0.16.0-17.fc7.ppc64.rpm
23ee24016bae5201d3e75cc546bfa8a1a513e208 ruby-gtkmozembed-0.16.0-17.fc7.ppc64.rpm
fb871a922c2bd613c7aa4db27e46901384ffa6df ruby-poppler-0.16.0-17.fc7.ppc64.rpm
9ad6e94d336d5e7b463a9aa506fc01492bb9505e ruby-gtkhtml2-0.16.0-17.fc7.ppc64.rpm
d561330a4de8901ec65a89d3e02d1369b09827ec ruby-gnomeprint2-0.16.0-17.fc7.ppc64.rpm
e562ec710b50eed88e57f7e377064ff6aebef429 ruby-glib2-devel-0.16.0-17.fc7.ppc64.rpm
31f61d03b7fb6e3587de5f4a20586b892c20eda2 ruby-libglade2-0.16.0-17.fc7.ppc64.rpm
c9d0cd569bf5748eba94a4e3ec40d2aed90fbe11 ruby-gdkpixbuf2-0.16.0-17.fc7.ppc64.rpm
e991bc4f82b07170006a70b1235ebe5747903ad8 ruby-gnome2-0.16.0-17.fc7.i386.rpm
ffa077ecd0e1eec5a37d4ae539125e7483fe320c ruby-gtk2-devel-0.16.0-17.fc7.i386.rpm
5f04a3ef6e584167a511e10f5163b732dceeea09 ruby-gtkglext-0.16.0-17.fc7.i386.rpm
9cc93b02c19c3ccc1e2246866e39a9af86e65af8 ruby-atk-0.16.0-17.fc7.i386.rpm
fe11f92972b009b82d66d6c8494368ee58b651da ruby-poppler-0.16.0-17.fc7.i386.rpm
fd0ca3708cf31d6ee280cefc033d4080b1e3f6a9 ruby-glib2-devel-0.16.0-17.fc7.i386.rpm
d41d0731d358431eba6272d480c2f1fcec9aa35a ruby-gnomecanvas2-0.16.0-17.fc7.i386.rpm
21aed4750552ffdf46026d68ec4d5a0e63b0ce98 ruby-gtk2-0.16.0-17.fc7.i386.rpm
f3cd9b27e77881d8392f26632be0c440564790b8 ruby-glib2-0.16.0-17.fc7.i386.rpm
bb0f9927f18993cdfa22d471bcc9b81899f1ed61 ruby-vte-0.16.0-17.fc7.i386.rpm
19fd02f3679c4ef14dcbbcee82ec2d9146e5bd78 ruby-gnomeprintui2-0.16.0-17.fc7.i386.rpm
3c8b590d98f552e369b2b75c368f91cda7f9a5f8 ruby-gnome2-debuginfo-0.16.0-17.fc7.i386.rpm
2d4a0d84b4599f402d6e93918b58abe57d58dea4 ruby-gnomeprint2-0.16.0-17.fc7.i386.rpm
f642f55df125729618c2c03b7ae9808b7970ce3d ruby-gtksourceview-0.16.0-17.fc7.i386.rpm
7cde2a764f6dae5e9bc7572651831b86d975116b ruby-libart2-0.16.0-17.fc7.i386.rpm
123fa28982044ce5b50389020c5e65915646c8b9 ruby-pango-devel-0.16.0-17.fc7.i386.rpm
a5d0f75577501978c6d1cb92d82f273d9ee2f6d1 ruby-gconf2-0.16.0-17.fc7.i386.rpm
a1ad6f5fefba86c78c861b10d6b59ffb5e844d6a ruby-gnomevfs-0.16.0-17.fc7.i386.rpm
a36d9a4bc2a8ef94f5ff47652980c09854f18f93 ruby-panelapplet2-0.16.0-17.fc7.i386.rpm
b4dbba2a446a2e611a967bf4f963997fb2aeb9be ruby-pango-0.16.0-17.fc7.i386.rpm
87e5687b0382d0a50c434ef0e6fcff16ff70befd ruby-libart2-devel-0.16.0-17.fc7.i386.rpm
721b4d16cfd11771dec26844649cb06f8c1ef80e ruby-gtkhtml2-0.16.0-17.fc7.i386.rpm
bb5fed4d49bdb8ebc20f43e3ac5702be7ad9b607 ruby-rsvg-0.16.0-17.fc7.i386.rpm
4c698658aed3cc6db129bdad44accdf6de9cf25a ruby-libglade2-0.16.0-17.fc7.i386.rpm
32582c18fb4e71fb93da362f4785a128438ed997 ruby-gdkpixbuf2-0.16.0-17.fc7.i386.rpm
6ddb86b3370002916658fae468102c688d93785a ruby-gtkmozembed-0.16.0-17.fc7.i386.rpm
c792dd97eb7a513bb8f1d9ee5cef961beef94e7c ruby-atk-devel-0.16.0-17.fc7.i386.rpm
08afe9c63681681aeeaea648b2320ca185147831 ruby-poppler-0.16.0-17.fc7.x86_64.rpm
5563fac5c3a65744eb6b2110db0b257c3ce31b27 ruby-libart2-devel-0.16.0-17.fc7.x86_64.rpm
0df99b4e6187b0f8f8688a297874f130e05c7d59 ruby-vte-0.16.0-17.fc7.x86_64.rpm
14abc5c517dea1369985b5f18410f3767b7426e3 ruby-panelapplet2-0.16.0-17.fc7.x86_64.rpm
1105a3e325c6aca19b391796d94cce869aab3c2c ruby-gdkpixbuf2-0.16.0-17.fc7.x86_64.rpm
c6689db8b0321a4df2f68482310a31c1bb6c54fc ruby-gtksourceview-0.16.0-17.fc7.x86_64.rpm
f075c0569b819172d5483dea49e3b83c2a15ae01 ruby-gtkmozembed-0.16.0-17.fc7.x86_64.rpm
49e0b9f9d2c95b49d956d45449bede33a0227ca0 ruby-gnomecanvas2-0.16.0-17.fc7.x86_64.rpm
b9af10f90a9801d80e62f8003a3436cb33aa10b4 ruby-gtkglext-0.16.0-17.fc7.x86_64.rpm
c31c60e4bb861fe44a4f680c5595bdaf782b58e9 ruby-atk-devel-0.16.0-17.fc7.x86_64.rpm
59127f466864095e17c897c58c049a464750640e ruby-pango-devel-0.16.0-17.fc7.x86_64.rpm
17a2098beb71f9bcf80c574179588f4cb1a3c8c7 ruby-gconf2-0.16.0-17.fc7.x86_64.rpm
9bc0974fa145aa9903e5fd4fc4108dad7676edf2 ruby-glib2-0.16.0-17.fc7.x86_64.rpm
4656936a56816684492b4972454b95d7d4622f8e ruby-gnomevfs-0.16.0-17.fc7.x86_64.rpm
e1ffb04597426c37c9c210b9ba77ae6bf729e95d ruby-glib2-devel-0.16.0-17.fc7.x86_64.rpm
2b1cd9f6a143f4b77167a581b6ae81528d4b67ad ruby-gnomeprint2-0.16.0-17.fc7.x86_64.rpm
19d5f3a578cc0fc540ba8397f459a3cbee933d69 ruby-gnomeprintui2-0.16.0-17.fc7.x86_64.rpm
003dc5901e6a3e5c5608bf0f908dc4067601b929 ruby-gtk2-0.16.0-17.fc7.x86_64.rpm
a4343804a64e11025d28eec5853e9675608a5d3a ruby-rsvg-0.16.0-17.fc7.x86_64.rpm
187290ece5b9be3c4664ec78fd38e0e32bec1f5a ruby-pango-0.16.0-17.fc7.x86_64.rpm
19899bb4a1d9ac7d51a7b1fad53322a909a7d768 ruby-atk-0.16.0-17.fc7.x86_64.rpm
ddc2eb512d2ba949f8e0b3bc2d9ffafc4d246327 ruby-libart2-0.16.0-17.fc7.x86_64.rpm
096f6012a949424f0dcd96ba27934af1bf341e7c ruby-gnome2-debuginfo-0.16.0-17.fc7.x86_64.rpm
4fd336ca92ed81241ca18c4b84e23f53e66cf08f ruby-gnome2-0.16.0-17.fc7.x86_64.rpm
5e1b9db6d1856328c0a335723577aa31fa6aa6de ruby-gtkhtml2-0.16.0-17.fc7.x86_64.rpm
6b5c2ae417f9712ec6ee26aec077838d294a6282 ruby-libglade2-0.16.0-17.fc7.x86_64.rpm
49a03ee19cecdb392bed79cf42a021bb7ab99338 ruby-gtk2-devel-0.16.0-17.fc7.x86_64.rpm
0810589138a37b3ef49b85e919a04844f263672c ruby-gnomevfs-0.16.0-17.fc7.ppc.rpm
06a3d39d81e99fb3663e7f720f0f97e9ed29f28d ruby-gnome2-debuginfo-0.16.0-17.fc7.ppc.rpm
22f718b00fc452b0e5df98c4c0ccd630ff795a17 ruby-gtk2-0.16.0-17.fc7.ppc.rpm
dfc7f30bd28125c53cd13a0d06ca02c99472af93 ruby-gnomeprint2-0.16.0-17.fc7.ppc.rpm
28f7c73cdcb35c3f608a113aa059e1ce9dffddf5 ruby-gtk2-devel-0.16.0-17.fc7.ppc.rpm
5e7ca7168969a35360c24e62723dcbe9be572609 ruby-pango-0.16.0-17.fc7.ppc.rpm
11d819704f6c9990cf654c877a15a3ef0b21f85a ruby-atk-0.16.0-17.fc7.ppc.rpm
42f80d969f61181af6c436ede15fdb3a67874089 ruby-gnomecanvas2-0.16.0-17.fc7.ppc.rpm
4fc18ea9c6e86d5de3f92851485e300e47a107d2 ruby-gnome2-0.16.0-17.fc7.ppc.rpm
334c316f770d2444f729d6aac37f8b7d1b131d48 ruby-glib2-0.16.0-17.fc7.ppc.rpm
ab8369f2bcbaaa198a654aa726dae78af2df5698 ruby-gtkglext-0.16.0-17.fc7.ppc.rpm
c31d97646ffb28510a964be406f8ffb8e63b7015 ruby-pango-devel-0.16.0-17.fc7.ppc.rpm
74b93402ed381e4401eedeb380e8fc27fb93f2e9 ruby-libart2-0.16.0-17.fc7.ppc.rpm
fd34eb4bfe2c3ef9e54640479bb4779679189944 ruby-gtkhtml2-0.16.0-17.fc7.ppc.rpm
7e7dcafe9fb321949b1eaad3fbef98b4e53a9417 ruby-vte-0.16.0-17.fc7.ppc.rpm
0899c03084776f8e034056afa16e30f5c8c275f7 ruby-libart2-devel-0.16.0-17.fc7.ppc.rpm
d6ba704ba0972157fae01f52646271ae3ae665ae ruby-atk-devel-0.16.0-17.fc7.ppc.rpm
8067fe584e9b037e86c69e76b3fa2275addacb63 ruby-glib2-devel-0.16.0-17.fc7.ppc.rpm
74ac7b657156490ff0de8047c56ebbdfc692fd57 ruby-gtkmozembed-0.16.0-17.fc7.ppc.rpm
fe76051dd37eec69f87640e5dc6d46ddac3f8b9b ruby-gnomeprintui2-0.16.0-17.fc7.ppc.rpm
cb501ba0e93731ddf7707ee0ca250a87ab38a2e5 ruby-gdkpixbuf2-0.16.0-17.fc7.ppc.rpm
6953aca393d2fcb2b5c7eae47b38a3458ea4489c ruby-libglade2-0.16.0-17.fc7.ppc.rpm
ff497e53ec79384d04d837f0d2d7b39f0ce88061 ruby-rsvg-0.16.0-17.fc7.ppc.rpm
9a308ecffa86032e949ff80c5fea36db2d17bdd5 ruby-gtksourceview-0.16.0-17.fc7.ppc.rpm
fc99a8b38f0afcbf2385ad94f1ed890381a3ea54 ruby-panelapplet2-0.16.0-17.fc7.ppc.rpm
602837d1fcd30298135bb7885d49c001e510d40a ruby-poppler-0.16.0-17.fc7.ppc.rpm
28a688c03a98189dbc0451e9b17751e1e7a1f182 ruby-gconf2-0.16.0-17.fc7.ppc.rpm
9b4ebb0948e03fb56be8cb56c992537db056e0f5 ruby-gnome2-0.16.0-17.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update ruby-gnome2'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : gnome-python2-extras
Product : Fedora 7
Version : 2.14.3
Release : 7.fc7
URL : http://www.pygtk.org/
Summary : The sources for additional. PyGNOME Python extension modules.
Description :
The gnome-python-extra package contains the source packages for additional
Python bindings for GNOME. It should be used together with gnome-python.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.14.3-7
- Rebuild against newer gecko
* Sat Nov 10 2007 Alex Lancaster <alexl(a)users.sourceforge.net> - 2.14.3-6.fc7
- Rebuild against firefox 2.0.0.9.
* Wed Oct 24 2007 Matthew Barnes <mbarnes(a)redhat.com> - 2.14.3-5.fc7
- Rebuild against firefox-2.0.0.8.
* Thu Jul 19 2007 Matthew Barnes <mbarnes(a)redhat.com> - 2.14.3-4.fc7
- Rebuild against firefox-2.0.0.5.
* Fri Jun 1 2007 Matthew Barnes <mbarnes(a)redhat.com> - 2.14.3-3.fc7
- Rebuild against firefox-2.0.0.4.
--------------------------------------------------------------------------------
Updated packages:
bc1e68b4e6a26b65f5cddb42c1b71105462fd7dd gnome-python2-gtkmozembed-2.14.3-7.fc7.ppc64.rpm
ba918b55759ae8cb2530bce52d3a1ada18669a87 gnome-python2-extras-2.14.3-7.fc7.ppc64.rpm
08267aa55f0e45b0293385e8803a59a5762ab05a gnome-python2-gtkspell-2.14.3-7.fc7.ppc64.rpm
a439c48b8cfb4e8a881e3d4a1311e7f5337db54b gnome-python2-extras-debuginfo-2.14.3-7.fc7.ppc64.rpm
3bc422fa409c8248d082b0abbb71b32952a08052 gnome-python2-libegg-2.14.3-7.fc7.ppc64.rpm
e767f64bb7e2f423ac9347dc1ba733960262446c gnome-python2-gtkhtml2-2.14.3-7.fc7.ppc64.rpm
3bf447da5be5ba10d932a307058b312d5bd8b846 gnome-python2-gtkhtml2-2.14.3-7.fc7.i386.rpm
559fef76614adb7b1dbeccffec36bfb84eee877c gnome-python2-extras-2.14.3-7.fc7.i386.rpm
b82744cb77a09351c905e600ff5117ac9f9d13fa gnome-python2-libegg-2.14.3-7.fc7.i386.rpm
738c0e271dd97657673386b431e9442c0f1bc334 gnome-python2-gtkmozembed-2.14.3-7.fc7.i386.rpm
443c1321cce03439af62058735700fb6c89e8b04 gnome-python2-extras-debuginfo-2.14.3-7.fc7.i386.rpm
fe2e80c9d9ec7869c53ae6b9c5bc6f480f360834 gnome-python2-gtkspell-2.14.3-7.fc7.i386.rpm
32bdb9131fc4071c216d42b98175d5fdea0dafb7 gnome-python2-libegg-2.14.3-7.fc7.x86_64.rpm
169b2e2c52cd7e6eb3d30c58a62b7ca7fe69c400 gnome-python2-gtkmozembed-2.14.3-7.fc7.x86_64.rpm
332ad8390bff453dd71a07593370efd590649afb gnome-python2-gtkspell-2.14.3-7.fc7.x86_64.rpm
01f9c29a9486812464a93402525556740259c6ea gnome-python2-extras-debuginfo-2.14.3-7.fc7.x86_64.rpm
56334ad3b9bd5121de9506bb0bb2816e8ad29cad gnome-python2-extras-2.14.3-7.fc7.x86_64.rpm
225de9d6135048965153d46e4acfe3d68a914652 gnome-python2-gtkhtml2-2.14.3-7.fc7.x86_64.rpm
72b937b656239701a211ba0de67acf09b02afe32 gnome-python2-extras-debuginfo-2.14.3-7.fc7.ppc.rpm
e9f2584ba4dffdba32da7a8d7e87ab5f698e2da0 gnome-python2-extras-2.14.3-7.fc7.ppc.rpm
df5e7c4ca5da9ed609b6cfb7828e879c3d0a94f4 gnome-python2-gtkmozembed-2.14.3-7.fc7.ppc.rpm
f5d1382cd1c6ccb78a691965e10053f0ea23421c gnome-python2-libegg-2.14.3-7.fc7.ppc.rpm
266f1a007979d1c20fc010ac46b10a9829ec3a3e gnome-python2-gtkhtml2-2.14.3-7.fc7.ppc.rpm
ae262b52015cefe713bb5d5e6a335828493e375d gnome-python2-gtkspell-2.14.3-7.fc7.ppc.rpm
7f31f4052fe3bf553b1d629c3ae69ece32e1c54a gnome-python2-extras-2.14.3-7.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-python2-extras'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : epiphany-extensions
Product : Fedora 7
Version : 2.18.3
Release : 6
URL : http://www.gnome.org/projects/epiphany/extensions
Summary : Extensions for Epiphany, the GNOME web browser
Description :
Epiphany Extensions is a collection of extensions for Epiphany, the
GNOME web browser.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-6
- Rebuild against newer gecko
* Tue Nov 6 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-5
- Rebuild for new Gecko (Firefox 2.0.0.9)
* Sat Oct 20 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-4
- Rebuild against new Gecko release (Firefox 2.0.0.8)
* Mon Jul 30 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-3
- Add a patch from upstream SVN to fix GNOME bug 452119 (crash in the
filterset.g updater tool from the AdBlocker extension):
+ fix-adblock-filtersetg-updater.patch
* Wed Jul 18 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-2
- Rebuild against new Gecko release (Firefox 2.0.0.5).
* Wed Jul 4 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-1
- Update to new upstream release (2.18.3).
* Wed Jun 6 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.2-3
- Specfiles should _NOT_ call rpm directly. Fix the previous bug the
correct way, by doing explicit requires on the exact versions instead
of via rpm -q
* Tue Jun 5 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.2-2
- Add %{_target_cpu} to versioned Firefox dependency to avoid multilib
updating issues such as bug 242318, wherein the 32-bit older Firefox build
matches the versioned dependency, but the updated 64-bit Firefox build
matches the 64-bit shared library dependencies. (Thanks to Frederik Hertzum
for the bug report.)
* Wed May 30 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.2-1
- Update to new upstream bugfix release (2.18.2); and rebuild for newer
Firefox/Gecko version (2.0.0.4).
--------------------------------------------------------------------------------
Updated packages:
14f8a9fe377988dcce00679fc138bba83f2e983c epiphany-extensions-debuginfo-2.18.3-6.ppc64.rpm
05f827d4823898b47520ada2f1d32f23f5ff312a epiphany-extensions-2.18.3-6.ppc64.rpm
8c723b7fa53a4ddf6a51537a67dac645d70d7c17 epiphany-extensions-2.18.3-6.i386.rpm
34c56e296f026427d253ffb6e9d96bcd1f9631fe epiphany-extensions-debuginfo-2.18.3-6.i386.rpm
5721eb03256feae75343d6b139ffe79ab2ca38cf epiphany-extensions-2.18.3-6.x86_64.rpm
b12fd241545c7204297702ec7de3b440a556028f epiphany-extensions-debuginfo-2.18.3-6.x86_64.rpm
16064cc592b10f6fe2d0b0bac90783857afdaadf epiphany-extensions-debuginfo-2.18.3-6.ppc.rpm
759f98986ec9d6e79c9bc0c8c40d878751eed9a6 epiphany-extensions-2.18.3-6.ppc.rpm
9a51a6a0e5813ed561166b1cb54b19a1dafc40e2 epiphany-extensions-2.18.3-6.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany-extensions'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : liferea
Product : Fedora 7
Version : 1.4.8
Release : 2.fc7
URL : http://liferea.sourceforge.net/
Summary : An RSS/RDF feed reader
Description :
Liferea (Linux Feed Reader) is an RSS/RDF feed reader.
It's intended to be a clone of the Windows-only FeedReader.
It can be used to maintain a list of subscribed feeds,
browse through their items, and show their contents.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.4.8-2
- Rebuild against newer gecko
--------------------------------------------------------------------------------
Updated packages:
9f1c924945c9747560f31e36face0ca490b770c4 liferea-1.4.8-2.fc7.ppc64.rpm
1cb69c699f34a6316f06faccee5647d701a14e93 liferea-debuginfo-1.4.8-2.fc7.ppc64.rpm
bc0ee372b0ccc34292e6fbf086ed5c392a90fb5c liferea-1.4.8-2.fc7.i386.rpm
da40d224fc3ce1d39c1b44b2add512fd01721087 liferea-debuginfo-1.4.8-2.fc7.i386.rpm
2156d38c78babed912d7272a95979dd7a033a4d8 liferea-debuginfo-1.4.8-2.fc7.x86_64.rpm
e89988f449bf88fbcac321fcdf0460ec8918afe4 liferea-1.4.8-2.fc7.x86_64.rpm
26c81b423032ea3c46271f35476178012410512b liferea-debuginfo-1.4.8-2.fc7.ppc.rpm
d4d6fca0abe8266fdb672aed74086fa324001890 liferea-1.4.8-2.fc7.ppc.rpm
848d984ada76801c6e983502b443f8cd26b9f6bb liferea-1.4.8-2.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update liferea'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 7
Version : 2.0.0.10
Release : 1.fc7
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-1
- Update to 2.0.0.10
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.0.0.9-1
- Update to 2.0.0.9
* Fri Oct 19 2007 Christopher Aillon <caillon(a)redhat.com> - 2.0.0.8-1
- Update to 2.0.0.8
* Tue Oct 16 2007 Martin Stransky <stransky(a)redhat.com>
- added fix for #246248 - firefox crashes when searching
* Wed Jul 18 2007 Kai Engert <kengert(a)redhat.com> - 2.0.0.5-1
- Update to 2.0.0.5
* Fri Jun 29 2007 Martin Stransky <stransky(a)redhat.com> 2.0.0.4-3
- backported pango patches from FC6 (1.5.0.12)
* Sun Jun 3 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-2
- Properly clean up threads with newer NSPR
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-1
- Final version
* Wed May 23 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-0.rc3
- Update to 2.0.0.4 RC3
--------------------------------------------------------------------------------
Updated packages:
5f82702a784c18ca7d95e40cac357a8a270ec0ef firefox-2.0.0.10-1.fc7.ppc64.rpm
c5b65c29ec1ac0894ca8e97e04408fb5517312a6 firefox-devel-2.0.0.10-1.fc7.ppc64.rpm
f9c562f877641658be04d0eea9dd2271a420a981 firefox-debuginfo-2.0.0.10-1.fc7.ppc64.rpm
5b7429aa2da63128d205c4f4ecec70a3e7857058 firefox-devel-2.0.0.10-1.fc7.i386.rpm
3336f3e9a798970f7bbee58f131df1bffdd64261 firefox-debuginfo-2.0.0.10-1.fc7.i386.rpm
9119dfbf1255b77a9e716253f85f489bf808ca91 firefox-2.0.0.10-1.fc7.i386.rpm
d77ecd089cf879bded44d4a7511db13f1e86bbea firefox-2.0.0.10-1.fc7.x86_64.rpm
fbec7cd5600ac4adf25e5bae5ee3a13a7f1630aa firefox-devel-2.0.0.10-1.fc7.x86_64.rpm
d45a47a2e3d2cbf3cef8a0b1a95975b3eec41501 firefox-debuginfo-2.0.0.10-1.fc7.x86_64.rpm
d6c62a8d2bd9d1c458d48e65017a0140aab0eba5 firefox-debuginfo-2.0.0.10-1.fc7.ppc.rpm
8e84244029764b858651deee75aa5cc398df0636 firefox-2.0.0.10-1.fc7.ppc.rpm
ff108dfe5450667292bd145bd7d298ba8b1f2aa1 firefox-devel-2.0.0.10-1.fc7.ppc.rpm
2beb6aa9a394af9dca72f410dd723513516cfec8 firefox-2.0.0.10-1.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 7
Version : 1.0.0
Release : 1.27.fc7
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.27
- Rebuild against newer gecko
* Fri Nov 16 2007 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.26
- build for firefox-2.0.0.9
* Sat Aug 11 2007 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.23
- update to 1.0.0
- update License field to GPLv2
* Sat Jul 21 2007 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-0.22.beta2
- fix desktop file
--------------------------------------------------------------------------------
Updated packages:
1684543fa3bb1b50387a9f8af78702834ccbee01 chmsee-1.0.0-1.27.fc7.ppc64.rpm
9715f1c455a10815a13fad594e1954d0992abd89 chmsee-debuginfo-1.0.0-1.27.fc7.ppc64.rpm
65570a79db94873d9494e1cd6c033c60497d371e chmsee-debuginfo-1.0.0-1.27.fc7.i386.rpm
7df6eef3eec6ca823e36e367d74a925ae9b9cc94 chmsee-1.0.0-1.27.fc7.i386.rpm
2138d17b7ce9df1aa405daae54db845e67ba90b1 chmsee-1.0.0-1.27.fc7.x86_64.rpm
90333f3ce679096c6c84753e8caccdecf893eaa3 chmsee-debuginfo-1.0.0-1.27.fc7.x86_64.rpm
850916312335948e25c69c4bb8a248bcad2fab68 chmsee-debuginfo-1.0.0-1.27.fc7.ppc.rpm
21d28958644e6b83a37118d6b66ed2565d8937a9 chmsee-1.0.0-1.27.fc7.ppc.rpm
161dca339da48218a82dd0eec832da35d5e09d5c chmsee-1.0.0-1.27.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : openvrml
Product : Fedora 7
Version : 0.16.7
Release : 2.fc7
URL : http://openvrml.org
Summary : VRML/X3D runtime library
Description :
OpenVRML is a VRML/X3D support library, including a runtime and facilities
for reading and displaying VRML and X3D models.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.7-2
- Updated gecko-libs dependency to 1.8.1.10.
* Thu Nov 15 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.7-1
- Updated to 0.16.7.
- Changed build prerequisite from firefox-devel to gecko-devel.
- Changed openvrml-xembed to require gecko-libs instead of firefox.
* Fri Nov 9 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-6
- Backed out inadvertent change.
* Fri Nov 9 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-5
- Updated firefox dependency to 2.0.0.9.
* Fri Oct 26 2007 Braden McDaniel <braden(a)endoframe.com>
- Updated license tags to LGPLv2+, GPLv2+.
* Thu Oct 25 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-4
- Made openvrml depend on gecko-libs instead of firefox.
* Wed Oct 24 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-3
- Updated firefox dependency to 2.0.0.8.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-2
- Updated firefox dependency to 2.0.0.5.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-1
- Updated to 0.16.6.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.5-1
- Updated to 0.16.5.
* Sat Jun 2 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.4-3
- Updated firefox dependency to 2.0.0.4.
--------------------------------------------------------------------------------
Updated packages:
f71626003b2a5416fca05729e096e5b164735170 openvrml-0.16.7-2.fc7.ppc64.rpm
3f3e7b11553ca6b75d28a3004ccb651868eb0289 openvrml-player-0.16.7-2.fc7.ppc64.rpm
c82491f7f77f541ac311bec8e307527f3ee8c289 openvrml-xembed-0.16.7-2.fc7.ppc64.rpm
af41d5d738720b63d928ec7dba9c304b2f52ca12 openvrml-debuginfo-0.16.7-2.fc7.ppc64.rpm
73f27dc76989a22c88ff602128acb8a4ae92bfc9 openvrml-mozilla-plugin-0.16.7-2.fc7.ppc64.rpm
7db31de7709ed0065bd0c79118a4f5a5541a6c73 openvrml-gl-0.16.7-2.fc7.ppc64.rpm
6d51fa67377512d1dc4ca90676d43b85a77f0d7e openvrml-gl-devel-0.16.7-2.fc7.ppc64.rpm
6e019b1005a9f569615f2edc00cdffbea6f9124a openvrml-devel-0.16.7-2.fc7.ppc64.rpm
082ceb719df982b21d50d51bf11461f7ea0a2a51 openvrml-xembed-0.16.7-2.fc7.i386.rpm
4eeeed1f32485cddff6a96fa7047fde9d926e36c openvrml-gl-0.16.7-2.fc7.i386.rpm
ab46846e1739f86bceca5ce83bfc644a95b6b78d openvrml-devel-0.16.7-2.fc7.i386.rpm
acdfb139980e68bcf0212e66e52a0a5cad86362a openvrml-debuginfo-0.16.7-2.fc7.i386.rpm
3eba9b1d9752e3b582f09da4dca7f18cdf69f068 openvrml-player-0.16.7-2.fc7.i386.rpm
d70b7b665756b96ac8b0cb6d07d512cf2bcef886 openvrml-gl-devel-0.16.7-2.fc7.i386.rpm
94f4f9b902d7dbdafc6b494d8106a2fd6acba060 openvrml-0.16.7-2.fc7.i386.rpm
fb6cf0749459c1d3507f0aea27e119dd24c7bc43 openvrml-mozilla-plugin-0.16.7-2.fc7.i386.rpm
6749d1f1fb9b0e81ccab9947423fad427017990e openvrml-gl-0.16.7-2.fc7.x86_64.rpm
6360629b63ce7298c2978b41a94ba7601c4669b3 openvrml-gl-devel-0.16.7-2.fc7.x86_64.rpm
eb7e5baa3fb9c5fb74d67931d3ed2b26a1fab853 openvrml-0.16.7-2.fc7.x86_64.rpm
d670bb9e54d842987e2368a7db4ace0bd4a1a5c0 openvrml-xembed-0.16.7-2.fc7.x86_64.rpm
4457f88ec273e3f5a19fcfc391312510ee2c0aad openvrml-player-0.16.7-2.fc7.x86_64.rpm
c4c9a1ba0324add90a78d3e88e966e19c8dc9a44 openvrml-mozilla-plugin-0.16.7-2.fc7.x86_64.rpm
a1bba1c512b684452f41d0902a361b6c65b3946c openvrml-debuginfo-0.16.7-2.fc7.x86_64.rpm
920802bae1964ff0f1dd860676f4ceb5b4035d27 openvrml-devel-0.16.7-2.fc7.x86_64.rpm
61bad94f12a3a08875e0657d6a813e52c754bb6d openvrml-gl-devel-0.16.7-2.fc7.ppc.rpm
5e40e9bd2a5a2e9a787529ee2477b06eb686e46c openvrml-0.16.7-2.fc7.ppc.rpm
0fbe42187887be435f859227ee20b1feff6c5e92 openvrml-player-0.16.7-2.fc7.ppc.rpm
cd906b17f40c92a3ce9af15d772aed8da305516f openvrml-mozilla-plugin-0.16.7-2.fc7.ppc.rpm
5a991374b94187c93a1e5d0b4f34a6c72066d10c openvrml-xembed-0.16.7-2.fc7.ppc.rpm
93a1919185b912ebe7e18759bd58bb315c203e01 openvrml-debuginfo-0.16.7-2.fc7.ppc.rpm
b40b222ad38dc74520b2cf3c6c74525632424c5d openvrml-devel-0.16.7-2.fc7.ppc.rpm
2ae003101674c7b806198ed221769fe4f4aaf6e8 openvrml-gl-0.16.7-2.fc7.ppc.rpm
4dc93dc011dba9b1cd626215915c20372c7bc6da openvrml-0.16.7-2.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update openvrml'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3952
2007-11-29 01:44:21.449766
--------------------------------------------------------------------------------
Name : devhelp
Product : Fedora 7
Version : 0.13
Release : 12.fc7
URL : http://developer.imendio.com/projects/devhelp
Summary : API document browser
Description :
An API document browser for GNOME 2.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-12
- Rebuild against newer gecko
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 0.13-11
- Rebuild against newer gecko
* Fri Oct 19 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-10
- Rebuild against newer gecko
* Wed Jul 18 2007 Kai Engert <kengert(a)redhat.com> - 0.13-9
- Rebuild against newer gecko
* Fri May 25 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-8
- Rebuild against newer gecko
* Mon Apr 23 2007 Matthew Barnes <mbarnes(a)redhat.com> - 0.13-7.fc7
- Add patch for RH bug #230837 (initialize GThread).
* Sat Apr 21 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.13-6
- Don't install INSTALL
--------------------------------------------------------------------------------
Updated packages:
6879dde28a6d411ca6d05f6dc46ad958ebe92337 devhelp-0.13-12.fc7.ppc64.rpm
e6f1127dedc826e56e41b032b504e7f6d3c44787 devhelp-devel-0.13-12.fc7.ppc64.rpm
aa0ce4dbfd000d0af55b727169a970f5f4bc047a devhelp-debuginfo-0.13-12.fc7.ppc64.rpm
3c579a6b78907721b4a3f2ee5f77c519b2ff5d59 devhelp-0.13-12.fc7.i386.rpm
9d708fab29f8fd1d13314baf4ca7067886f6c888 devhelp-devel-0.13-12.fc7.i386.rpm
3bc5ac0cc62cf68fd77fb9f897d927d40b0ca31a devhelp-debuginfo-0.13-12.fc7.i386.rpm
e03e752de427c189fb825274c8805793659b5810 devhelp-devel-0.13-12.fc7.x86_64.rpm
cebde82d6fc003edd7eb41a42431fdfd5ee3d503 devhelp-0.13-12.fc7.x86_64.rpm
66587ade46affd29a3dba21fe3df8cfe92caf819 devhelp-debuginfo-0.13-12.fc7.x86_64.rpm
d9ec343a3c37cefd88899813fe7f4c7572835709 devhelp-0.13-12.fc7.ppc.rpm
00322c3c319ef548f6686d2d4e5452372d723745 devhelp-debuginfo-0.13-12.fc7.ppc.rpm
3ee9419e7fa7137d43e2388b8f8f1a1c7108e878 devhelp-devel-0.13-12.fc7.ppc.rpm
7685fe4f15ffc60ab05f69a5c2880843f0091078 devhelp-0.13-12.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update devhelp'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------