package-announce May 2007

package-announce@lists.fedoraproject.org

33 participants
84 discussions

Fedora Core 6 Update: logrotate-3.7.4-14.fc6
by Tomáš Smetana 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-558 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : logrotate Version : 3.7.4 Release : 14.fc6 Summary : Rotates, compresses, removes and mails system log files Description : The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log file gets to a certain size. Normally, logrotate runs as a daily cron job. Install the logrotate package if you need a utility to deal with the log files on your system. --------------------------------------------------------------------- * Thu May 31 2007 Tomas Smetana <tsmetana(a)redhat.com> 3.7.4-14 - fix ignoring pre/postrotate script arguments (related #241766) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ fdf1c2f4f02eafadda01165f8755df372dd6f942 SRPMS/logrotate-3.7.4-14.fc6.src.rpm fdf1c2f4f02eafadda01165f8755df372dd6f942 noarch/logrotate-3.7.4-14.fc6.src.rpm f9963c82bad708b940316f1f8003272feaaef7ff ppc/logrotate-3.7.4-14.fc6.ppc.rpm 47c574309ea9c4f8a02ee8386016d4d822bcea37 ppc/debug/logrotate-debuginfo-3.7.4-14.fc6.ppc.rpm c61003ddb03d30ba7ceb7766bb92a1b2d042e527 x86_64/logrotate-3.7.4-14.fc6.x86_64.rpm c5bff1661fcc378e3eaef45d03e04ce3b41a5c53 x86_64/debug/logrotate-debuginfo-3.7.4-14.fc6.x86_64.rpm db8b88ed962a273199ad5564dabba95b0df62589 i386/logrotate-3.7.4-14.fc6.i386.rpm fd741372ee7edcbddb0f0273d1541896cf363745 i386/debug/logrotate-debuginfo-3.7.4-14.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: lha-1.14i-20
by Tomáš Smetana 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-557 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 5 Name : lha Version : 1.14i Release : 20 Summary : An archiving and compression utility for LHarc format archives. Description : LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives. --------------------------------------------------------------------- * Thu May 31 2007 Tomas Smetana <tsmetana(a)redhat.com> - 1.14i-20 - fix #220596 CVE-2006-4335/7/8 multiple vulnerabilities in lha --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ f77c3f3784791ebef153250183a94e7435c3910a SRPMS/lha-1.14i-20.src.rpm f77c3f3784791ebef153250183a94e7435c3910a noarch/lha-1.14i-20.src.rpm 60f14246eab34d230adc929a7d405a86b05b82fb ppc/lha-1.14i-20.ppc.rpm df778e5163b234a85ec836be5f5f39a70fa5850c ppc/debug/lha-debuginfo-1.14i-20.ppc.rpm 74e9229fd6cef8687e50d0c5eeb1b9dbaae0bc40 x86_64/debug/lha-debuginfo-1.14i-20.x86_64.rpm 28b18e042aaeee1d5e4c9625e0bb8b6339da35ff x86_64/lha-1.14i-20.x86_64.rpm 79d0dbcac14f359d693300c8d417a8c6162aa214 i386/debug/lha-debuginfo-1.14i-20.i386.rpm 2c067e9c2f6e150259bd40c25b954399fc08307f i386/lha-1.14i-20.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: elinks-0.11.1-5.2
by Karel Zak 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-556 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : elinks Version : 0.11.1 Release : 5.2 Summary : A text-mode Web browser. Description : Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage over graphical browsers is its speed--Links starts and exits quickly and swiftly displays Web pages. --------------------------------------------------------------------- * Thu May 31 2007 Karel Zak <kzak(a)redhat.com> 0.11.1-5.2 - fix #235411: CVE-2007-2027 elinks tries to load .po files from a non-absolute path --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 6104f49aebe4525f8090cb16cb6e14bd61e8ecdd SRPMS/elinks-0.11.1-5.2.src.rpm 6104f49aebe4525f8090cb16cb6e14bd61e8ecdd noarch/elinks-0.11.1-5.2.src.rpm 585d68236c44ba7f76cc0ef684d743abeaaa084c ppc/debug/elinks-debuginfo-0.11.1-5.2.ppc.rpm 6dfe83fd1a9c8211426f6d4067dee0d8aae22af8 ppc/elinks-0.11.1-5.2.ppc.rpm 8958098a182088ca02fee40bd4ef3b6f24347d03 x86_64/debug/elinks-debuginfo-0.11.1-5.2.x86_64.rpm 5d35d130ce10ccb855ec59e1ed5693e9403b2342 x86_64/elinks-0.11.1-5.2.x86_64.rpm ee0cc27f7a97ca8c57ba6dfde359d6c2a9c68fe1 i386/debug/elinks-debuginfo-0.11.1-5.2.i386.rpm f191b18fe2e01ad36b7e152481ec2b1437293cfa i386/elinks-0.11.1-5.2.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: firefox-1.5.0.12-1.fc5
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-554 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 5 Name : firefox Version : 1.5.0.12 Release : 1.fc5 Summary : Mozilla Firefox Web browser. Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. --------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security bugs are now available for Fedora Core 5. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1 - Update to 1.5.0.12 * Thu Feb 22 2007 Martin Stransky <stransky(a)redhat.com> - 1.5.0.10-1 - Update to 1.5.0.10 * Wed Dec 20 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.9-1 - Update to 1.5.0.9 * Tue Nov 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.8-1 - Update to 1.5.0.8 - Fix up a few items in the download manager - Use the bullet character for password fields. - Add pango printing patch from Behdad. * Wed Sep 13 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-1 - Update to 1.5.0.7 - Bring in pango patches from rawhide to fix MathML and cursor positioning * Tue Aug 8 2006 Jesse Keating <jkeating(a)redhat.com> - 1.5.0.6-2 - Use dist tag - rebuild * Thu Aug 3 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.6-1.1.fc5 - Update to 1.5.0.6 * Thu Jul 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-1.1.fc5 - Update to 1.5.0.5 * Wed Jun 14 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-1.2.fc5 - Force "gmake -j1" on ppc ppc64 s390 s390x * Mon Jun 12 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-1.1.fc5 - Firefox 1.5.0.4 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ a83e5361e463ea25f96f4b084e670fe337a3ca97 SRPMS/firefox-1.5.0.12-1.fc5.src.rpm a83e5361e463ea25f96f4b084e670fe337a3ca97 noarch/firefox-1.5.0.12-1.fc5.src.rpm 7b9fe30496f3867231c09d3762661dcb654ba7aa ppc/debug/firefox-debuginfo-1.5.0.12-1.fc5.ppc.rpm 7c16f90f7496ef7f1e8d25db6f8c34642bb7e950 ppc/firefox-1.5.0.12-1.fc5.ppc.rpm b859e8dfd781d2cbe9c291b9ab884b851aadeae3 x86_64/debug/firefox-debuginfo-1.5.0.12-1.fc5.x86_64.rpm dca05f5c9941dc93cc9d269f5101e6608f71cca7 x86_64/firefox-1.5.0.12-1.fc5.x86_64.rpm 39ca095c35a32b1a9f312945f28b53b8e87cd959 i386/firefox-1.5.0.12-1.fc5.i386.rpm ad1190d8d8b26817e343073f834d1ba5dd8b21f7 i386/debug/firefox-debuginfo-1.5.0.12-1.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: epiphany-2.14.3-6.fc5
by Christopher Aillon 31 May '07

31 May '07

1 0

[SECURITY] Fedora Core 5 Update: yelp-2.14.3-5.fc5
by Christopher Aillon 31 May '07

31 May '07

1 0

[SECURITY] Fedora Core 5 Update: devhelp-0.11-7.fc5
by Christopher Aillon 31 May '07

31 May '07

1 0

[SECURITY] Fedora Core 5 Update: seamonkey-1.0.9-1.fc5
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-552 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 5 Name : seamonkey Version : 1.0.9 Release : 1.fc5 Summary : Web browser and mail reader Description : SeaMonkey (former Mozilla) is an open-source web browser, designed for standards compliance, performance and portability. --------------------------------------------------------------------- Update Information: Updated seamonkey packages that fix several security bugs are now available for Fedora Core 5. This update has been rated as having critical security impact by the Fedora Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way SeaMonkey handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way SeaMonkey handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent SeaMonkey from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way SeaMonkey processed certain APOP authentication requests. By sending certain responses when SeaMonkey attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558) A flaw was found in the way SeaMonkey handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way SeaMonkey displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of SeaMonkey are advised to upgrade to these erratum packages, which contain SeaMonkey version 1.0.9 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.0.9-1 - Update to 1.0.9 * Thu Feb 15 2007 Martin Stransky <stransky(a)redhat.com> 1.0.8-0.5.1 - Update to 1.0.8 * Thu Jan 18 2007 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.6.0.1 - created a link in /usr/bin/seamonkey - fixed mozilla-rebuild-databases.pl script, was called in %post with an incorrect path - fixed mozilla-config script - added a configuration from former extras seamonkey (#223848) * Thu Jan 4 2007 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.6 - Release bump * Thu Dec 21 2006 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.1 - Update to 1.0.7 * Tue Dec 19 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.3 - added dependencies on nspr-devel,nss-devel to seamonkey-devel package * Thu Dec 14 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.2.fc6 - added ppc64 to arches * Fri Nov 10 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.1.fc6 - moved to core - replaced nspr/nss with packages from core * Sun Nov 5 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.6-0.1.el4 - Update to 1.0.6 (RC) * Mon Sep 11 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.5-0.1.el4 - Update to 1.0.5 * Wed Jul 26 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.3-0.el4.1 - Update to 1.0.3 * Wed Jun 28 2006 Warren Togami <wtogami(a)redhat.com> 1.0.2-0.1.0.EL4 - Prevent obsolete script from replacing mozilla-xremote-client (#192639) - 1.0.2 security fixes - remove unused patches * Mon May 22 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.3.EL4 - Fix the -devel packages and pkg-config files * Fri May 19 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.2.EL4 - Import some fixes from the RHEL3 package * Fri May 12 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.1.EL4 - Initial Seamonkey RPM --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ d097d329fcc14226207e03feb051fd178654c518 SRPMS/seamonkey-1.0.9-1.fc5.src.rpm d097d329fcc14226207e03feb051fd178654c518 noarch/seamonkey-1.0.9-1.fc5.src.rpm af3c13a62a5c719f2ef9e3a571ee73fd9dfcf84f ppc/seamonkey-1.0.9-1.fc5.ppc.rpm ecd0cc46cab09c1b0deb64a5822a39ae37c9fc25 ppc/debug/seamonkey-debuginfo-1.0.9-1.fc5.ppc.rpm 5b0f2481d2f21ca022642d02b311fce60a73e8f9 ppc/seamonkey-js-debugger-1.0.9-1.fc5.ppc.rpm f65231af0064b2b110ffbe8b97c631189f6be467 ppc/seamonkey-mail-1.0.9-1.fc5.ppc.rpm 2e38ac784a687d95ca55ad21f0a38e8b70f61add ppc/seamonkey-dom-inspector-1.0.9-1.fc5.ppc.rpm c1a3f8acfd8f153096816d1fbe38a1d14d72e81d ppc/seamonkey-devel-1.0.9-1.fc5.ppc.rpm 547fe1520b3759f449472963b8edbc9e8bafb948 ppc/seamonkey-chat-1.0.9-1.fc5.ppc.rpm 99c14431b09e82a17d10547c7e20fa89f79f64be x86_64/seamonkey-dom-inspector-1.0.9-1.fc5.x86_64.rpm 34866fb6795fca53e30344457bdbb2088fcb2587 x86_64/seamonkey-devel-1.0.9-1.fc5.x86_64.rpm e608060c3863ce2f2bf166a8e5ee1908bb2db6b7 x86_64/seamonkey-js-debugger-1.0.9-1.fc5.x86_64.rpm 9d41cdfb0694dd6fa5c13aa8cbc8cba20f411478 x86_64/seamonkey-1.0.9-1.fc5.x86_64.rpm ee27045e12188268010b7d5f7738b6e3fd2c439b x86_64/seamonkey-chat-1.0.9-1.fc5.x86_64.rpm fd58a33d9ae701661fa499e157bbfbc5e74c6a4e x86_64/seamonkey-mail-1.0.9-1.fc5.x86_64.rpm c2c281e8818145761d9dc90fb1cdbd099499e016 x86_64/debug/seamonkey-debuginfo-1.0.9-1.fc5.x86_64.rpm 026cfd55c1a74b8172df78af632a67e77e8a1ed3 i386/seamonkey-devel-1.0.9-1.fc5.i386.rpm 1bf11eaae35d4e525bded75d4499beeaae67cfd1 i386/seamonkey-dom-inspector-1.0.9-1.fc5.i386.rpm fd557a8d93ef82c3ec079eba84a898264c8890c3 i386/debug/seamonkey-debuginfo-1.0.9-1.fc5.i386.rpm 64f814f2239657dbd777fe1e7e6cdc084e299844 i386/seamonkey-js-debugger-1.0.9-1.fc5.i386.rpm aa8011ceba48b69177d57459037a965d6c16d9fb i386/seamonkey-mail-1.0.9-1.fc5.i386.rpm e61f1037c452166539953ab4109547a3f689a233 i386/seamonkey-1.0.9-1.fc5.i386.rpm 143488a2691b79878ad25250a0314e7377875f03 i386/seamonkey-chat-1.0.9-1.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-551 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 5 Name : thunderbird Version : 1.5.0.12 Release : 1.fc5 Summary : Mozilla Thunderbird mail/newsgroup client Description : Mozilla Thunderbird is a standalone mail and newsgroup client. --------------------------------------------------------------------- Update Information: Updated thunderbird packages that fix several security bugs are now available for Fedora Core. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. (CVE-2007-2867, CVE-2007-2868) Several denial of service flaws were found in the way Thunderbird handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Thunderbird from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Thunderbird processed certain APOP authentication requests. By sending certain responses when Thunderbird attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558) A flaw was found in the way Thunderbird displayed certain web content. A malicious web page could generate content which could overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Thunderbird are advised to apply this update, which contains Thunderbird version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1 - Update to 1.5.0.12 * Thu Mar 1 2007 Martin Stransky <stransky(a)redhat.com> 1.5.0.10-1 - Update to 1.5.0.10 * Tue Dec 19 2006 Matthias Clasen <mclasen(a)redhat.com> 1.5.0.9-2 - Add a Requires: launchmail (#219884) * Tue Dec 19 2006 Christopher Aillon <caillon(a)redhat.com> 1.5.0.9-1 - Update to 1.5.0.9 - Take firefox's pango fixes - Don't offer to import...nothing. * Tue Nov 7 2006 Christopher Aillon <caillon(a)redhat.com> 1.5.0.8-1 - Update to 1.5.0.8 - Allow choosing of download directory - Take the user to the correct directory from the Download Manager. - Patch to add support for printing via pango from Behdad. * Sun Oct 8 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-4 - Default to use of system colors * Wed Oct 4 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-3 - Bring the invisible character to parity with GTK+ * Wed Sep 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-2 - Fix crash when changing gtk key theme - Prevent UI freezes while changing GNOME theme - Remove verbiage about pango; no longer required by upstream. * Wed Sep 13 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-1 - Update to 1.5.0.7 * Thu Sep 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-8 - Shuffle order of the install phase around * Thu Sep 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-7 - Let there be art for Alt+Tab again - s/tbdir/mozappdir/g * Wed Sep 6 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-6 - Fix for cursor position in editor widgets by tagoh and behdad (#198759) * Tue Sep 5 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-5 - Update nopangoxft.patch - Fix rendering of MathML thanks to Behdad Esfahbod. - Update start page text to reflect the MathML fixes. - Enable pango by default on all locales - Build using -rpath - Re-enable GCC visibility * Thu Aug 3 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.5-4 - Fix a build failure in mailnews mime code. * Tue Aug 1 2006 Matthias Clasen <mclasen(a)redhat.com> - 1.5.0.5-3 - Rebuild * Thu Jul 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-2 - Update to 1.5.0.5 * Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 1.5.0.4-2.1 - rebuild * Mon Jun 12 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-2 - Update to 1.5.0.4 - Fix desktop-file-utils requires --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ 9d6bcf40d81d9d0f281ff9e934ccde1636a82ad2 SRPMS/thunderbird-1.5.0.12-1.fc5.src.rpm 9d6bcf40d81d9d0f281ff9e934ccde1636a82ad2 noarch/thunderbird-1.5.0.12-1.fc5.src.rpm ae8c17a9b856514272d3ad2c55a329717e9cb72b ppc/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.ppc.rpm 005323944a0e7ff4a66361b59746228ab5f5a161 ppc/thunderbird-1.5.0.12-1.fc5.ppc.rpm c29fb2dff816698d248fe2138cd4455bb9c1cb85 x86_64/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.x86_64.rpm 3a1694d8866f0a4ddf6c06eec6b528f4e4dde4b9 x86_64/thunderbird-1.5.0.12-1.fc5.x86_64.rpm 8bb7e372c859690a4f8ca6a4f8944ee3d20d5c96 i386/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.i386.rpm d1baff4693caacf1896eebf6c06551a58293a886 i386/thunderbird-1.5.0.12-1.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-550 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : thunderbird Version : 1.5.0.12 Release : 1.fc6 Summary : Mozilla Thunderbird mail/newsgroup client Description : Mozilla Thunderbird is a standalone mail and newsgroup client. --------------------------------------------------------------------- Update Information: Updated thunderbird packages that fix several security bugs are now available for Fedora Core. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. (CVE-2007-2867, CVE-2007-2868) Several denial of service flaws were found in the way Thunderbird handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Thunderbird from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Thunderbird processed certain APOP authentication requests. By sending certain responses when Thunderbird attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558) A flaw was found in the way Thunderbird displayed certain web content. A malicious web page could generate content which could overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Thunderbird are advised to apply this update, which contains Thunderbird version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1 - Update to 1.5.0.12 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ b2bc6b0b1873b30decc11855918c76642e0519c5 SRPMS/thunderbird-1.5.0.12-1.fc6.src.rpm b2bc6b0b1873b30decc11855918c76642e0519c5 noarch/thunderbird-1.5.0.12-1.fc6.src.rpm 319cb9203c2c79699043204a8a110e402f783d7a ppc/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.ppc.rpm d026f2c02fae7bb3d554bb3d4ce8e412ae8f32ec ppc/thunderbird-1.5.0.12-1.fc6.ppc.rpm fddac5a083a0319c39ba81f18d43422682079a91 x86_64/thunderbird-1.5.0.12-1.fc6.x86_64.rpm ea9caab8666767718ae24cb44943dd5097e6f7b2 x86_64/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.x86_64.rpm 1eafd155c1d1013e137c0b948a06210145269f16 i386/thunderbird-1.5.0.12-1.fc6.i386.rpm 07bf8d163e7592a8adc9ee29a972b8f02bcb8f8b i386/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce May 2007