--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3250
2008-04-22 22:14:32
--------------------------------------------------------------------------------
Name : mt-daapd
Product : Fedora 8
Version : 0.9
Release : 0.4.1696.fc8
URL : http://www.fireflymediaserver.org/
Summary : An iTunes-compatible media server
Description :
The purpose of this project is built the best server software to serve
digital music to the Roku Soundbridge and iTunes; to be able to serve
the widest variety of digital music content over the widest range of
devices.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #442688 - CVE-2008-1771 mt-daapd: integer overflow allowing remote DoS and possibly arbitrary code execution
https://bugzilla.redhat.com/show_bug.cgi?id=442688
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mt-daapd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 7
Version : 1.0.0
Release : 2.30.fc7
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-2.30
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> 1.0.0-1.30
- Rebuild against newer gecko
* Tue Mar 4 2008 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.29
- re-add firefox_version
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.28
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 7
Version : 2.18.3
Release : 9.fc7
URL : http://www.gnome.org/projects/epiphany/
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-9
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-8
- Rebuild against newer gecko
* Sat Mar 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-7
- Update the useragent for Fedora
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-6
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-5
- Rebuild against newer gecko
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.18.3-4
- Rebuild against newer gecko
* Fri Oct 19 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-3
- Rebuild against newer gecko
* Wed Jul 18 2007 Kai Engert <kengert(a)redhat.com> - 2.18.3-2
- Rebuild against newer gecko
* Mon Jul 2 2007 Matthias Clasen <mclasen(a)redhat.com> 2.18.3-1
- Update to 2.18.3
* Tue May 29 2007 Matthias Clasen <mclasen(a)redhat.com> 2.18.2-1
- Update to 2.18.2
* Thu May 24 2007 Christopher Aillon <caillon(a)redhat.com> 2.18.1-3
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : kazehakase
Product : Fedora 7
Version : 0.5.4
Release : 2.fc7.2
URL : http://kazehakase.sourceforge.jp/
Summary : Kazehakase browser using Gecko rendering engine
Description :
Kazehakase is a Web browser which aims to provide
a user interface that is truly user-friendly & fully customizable.
This package uses Gecko for HTML rendering engine.
If you want to use WebKit for HTML rendering engine, install
"kazehakase-webkit" rpm instead.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.5.4-2.2
- Rebuild against newer gecko
* Mon Apr 14 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.4-2
- Rebuild for new WebKit (F-7/8: bug 438531)
* Sun Mar 30 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.4-1
- 0.5.4
* Fri Mar 28 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.3-6.svn3501_trunk
- Try svn 3501 (still not work against xulrunner :( )
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 0.5.3-5
- Rebuild against newer gecko (F-7/8)
* Wed Mar 5 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.3-4
- Create kazehakase-base, split gecko.so from -base package
so that users can install only WebKit based package.
* Sun Mar 2 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.3-3
- Support WebGTK
* Sat Mar 1 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.3-1
- 0.5.3
* Fri Feb 29 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.2-8.svn3410_trunk
- More try to use xulrunner
* GRE version fix
* Remove seemingly undesirable linking
* Sun Feb 24 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.2-7.svn3391_trunk
- More try to use xulrunner
* Fix linkage for gecko.so
* Don't use MOZILLA_INTERNAL_API anymore
* NS_NewStorageStream should be changed to use xpcom
http://developer.mozilla.org/en/docs/Migrating_from_Internal_Linkage_to_Fro…
* Sat Feb 23 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.2-2.svn3391_trunk
- F-9: Try latest svn for xulrunner
* Fri Feb 15 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.2-1.2.svn3358
- F-9: Try latest svn for xulrunner
(Still build explicitly disabled. Now it builds, does not crash
but hangs eternally...)
* Sat Feb 9 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- Rebuild for new gecko engine (F-7/F-8)
* Wed Jan 30 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.2-1
- 0.5.2
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com>
- F-7/8: Rebuild against newer gecko
* Mon Nov 12 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-2
- F-9: try to switch to xulrunner
* Tue Nov 6 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1.dist.1
- Rebuild against new gecko engine
- Switch to use gecko virtual dependency (bug 352091)
* Mon Oct 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1
- 0.5.0
* Fri Oct 26 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2.svn3312
- Try svn 3312
* Tue Oct 23 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2.dist.1
- Rebuild against new gecko engine.
* Mon Oct 8 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-2
- Readd accidentally deleted obsolete_plugin_ver macro
* Sat Sep 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.9-1
- 0.4.9
* Thu Aug 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.8-1
- 0.4.8
* Wed Aug 22 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-9.svn3228.dist.1
- Mass rebuild (buildID or binutils issue)
* Thu Aug 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-9.svn3228
- Rebuild against new gecko engine.
* Fri Aug 3 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-8.svn3228
- Try svn 3228
- Disable GTK_DISABLE_DEPRECATED for now
- License update
* Sat Jul 21 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-7.svn3227
- Try svn 3227 to drop GLib patch
* Mon Jun 18 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-5
- Rebuild against new gecko engine
* Tue Jun 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-3
- Patch to follow the newest GLib symbol
* Tue Jun 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-2
- Parse GLib version dependency
* Wed May 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.7-1
- 0.4.7
* Mon May 28 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.4.6-5.svn3221
- Try svn 3221
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kazehakase' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : ruby-gnome2
Product : Fedora 7
Version : 0.16.0
Release : 23.fc7
URL : http://ruby-gnome2.sourceforge.jp/
Summary : Ruby binding of libgnome/libgnomeui-2.x
Description :
This is a set of bindings for the GNOME-2.x libraries for use from Ruby.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.0-23
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> 0.16.0-22
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> 0.16.0-21
- Rebuild against newer gecko
* Sat Jan 26 2008 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-20
- Fix libglade2 patch order
* Sat Jan 26 2008 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-19
- Fix libglade2 Undefined method error (bugzilla #428781)
* Tue Dec 4 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-18
- Fix CVE-2007-6183, format string vulnerability (bugzilla #402871)
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> 0.16.0-17
- Rebuild against newer gecko
* Tue Nov 13 2007 Alex Lancaster <alexl(a)users.sourceforge.net> 0.16.0-16
- Fix my typo in BuildRequires
* Tue Nov 13 2007 Alex Lancaster <alexl(a)users.sourceforge.net> 0.16.0-15
- Rebuild against gecko-libs and gecko-devel (firefox 2.0.0.9).
* Thu Oct 25 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-14
- Rebuild against gecko-libs and gecko-devel
* Wed Oct 24 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-13
- Rebuild against new firefox
* Thu Sep 13 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-12
- Newpoppler.patch updated for poppler 0.6
* Sat Sep 8 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-11
- Rebuild against new poppler
- Changed license to LGPLv2+
* Thu Aug 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> 0.16.0-10
- Adjust to GLib 2.14 API + typo fix in glib module
* Thu Aug 9 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-9
- Rebuild against new firefox
* Sat Aug 4 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> 0.16.0-8
- Apply patch extracted from CVS to build glib gtk poppler
* Fri Jul 20 2007 Jesse Keating <jkeating(a)redhat.com> 0.16.0-7
- Rebuild against new firefox
* Thu May 31 2007 Allisson Azevedo <allisson(a)gmail.com> 0.16.0-6
- New gecko engine
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ruby-gnome2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 7
Version : 1.2
Release : 2.fc7
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 7
Version : 2.0.0.14
Release : 1.fc7
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.14-1
- Update to 2.0.0.14
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.13-1
- Update to 2.0.0.13
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.12-1
- Update to 2.0.0.12
* Wed Nov 28 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-2
- Make Canvas.drawImage work again
* Mon Nov 26 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-1
- Update to 2.0.0.10
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.0.0.9-1
- Update to 2.0.0.9
* Fri Oct 19 2007 Christopher Aillon <caillon(a)redhat.com> - 2.0.0.8-1
- Update to 2.0.0.8
* Tue Oct 16 2007 Martin Stransky <stransky(a)redhat.com>
- added fix for #246248 - firefox crashes when searching
* Wed Jul 18 2007 Kai Engert <kengert(a)redhat.com> - 2.0.0.5-1
- Update to 2.0.0.5
* Fri Jun 29 2007 Martin Stransky <stransky(a)redhat.com> 2.0.0.4-3
- backported pango patches from FC6 (1.5.0.12)
* Sun Jun 3 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-2
- Properly clean up threads with newer NSPR
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-1
- Final version
* Wed May 23 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-0.rc3
- Update to 2.0.0.4 RC3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : epiphany-extensions
Product : Fedora 7
Version : 2.18.3
Release : 9
URL : http://www.gnome.org/projects/epiphany/extensions
Summary : Extensions for Epiphany, the GNOME web browser
Description :
Epiphany Extensions is a collection of extensions for Epiphany, the
GNOME web browser.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-9
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-8
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-7
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.3-6
- Rebuild against newer gecko
* Tue Nov 6 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-5
- Rebuild for new Gecko (Firefox 2.0.0.9)
* Sat Oct 20 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-4
- Rebuild against new Gecko release (Firefox 2.0.0.8)
* Mon Jul 30 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-3
- Add a patch from upstream SVN to fix GNOME bug 452119 (crash in the
filterset.g updater tool from the AdBlocker extension):
+ fix-adblock-filtersetg-updater.patch
* Wed Jul 18 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-2
- Rebuild against new Gecko release (Firefox 2.0.0.5).
* Wed Jul 4 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.3-1
- Update to new upstream release (2.18.3).
* Wed Jun 6 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.2-3
- Specfiles should _NOT_ call rpm directly. Fix the previous bug the
correct way, by doing explicit requires on the exact versions instead
of via rpm -q
* Tue Jun 5 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.2-2
- Add %{_target_cpu} to versioned Firefox dependency to avoid multilib
updating issues such as bug 242318, wherein the 32-bit older Firefox build
matches the versioned dependency, but the updated 64-bit Firefox build
matches the 64-bit shared library dependencies. (Thanks to Frederik Hertzum
for the bug report.)
* Wed May 30 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.18.2-1
- Update to new upstream bugfix release (2.18.2); and rebuild for newer
Firefox/Gecko version (2.0.0.4).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany-extensions' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : openvrml
Product : Fedora 7
Version : 0.16.7
Release : 5.fc7
URL : http://openvrml.org
Summary : VRML/X3D runtime library
Description :
OpenVRML is a VRML/X3D support library, including a runtime and facilities
for reading and displaying VRML and X3D models.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.7-5
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.7-4
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.7-3
- Rebuild against newer gecko
* Tue Nov 27 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.7-2
- Updated gecko-libs dependency to 1.8.1.10.
* Thu Nov 15 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.7-1
- Updated to 0.16.7.
- Changed build prerequisite from firefox-devel to gecko-devel.
- Changed openvrml-xembed to require gecko-libs instead of firefox.
* Fri Nov 9 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-6
- Backed out inadvertent change.
* Fri Nov 9 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-5
- Updated firefox dependency to 2.0.0.9.
* Fri Oct 26 2007 Braden McDaniel <braden(a)endoframe.com>
- Updated license tags to LGPLv2+, GPLv2+.
* Thu Oct 25 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-4
- Made openvrml depend on gecko-libs instead of firefox.
* Wed Oct 24 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-3
- Updated firefox dependency to 2.0.0.8.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-2
- Updated firefox dependency to 2.0.0.5.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.6-1
- Updated to 0.16.6.
* Thu Jun 7 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.5-1
- Updated to 0.16.5.
* Sat Jun 2 2007 Braden McDaniel <braden(a)endoframe.com> - 0.16.4-3
- Updated firefox dependency to 2.0.0.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openvrml' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3249
2008-04-22 22:14:28
--------------------------------------------------------------------------------
Name : devhelp
Product : Fedora 7
Version : 0.13
Release : 16.fc7
URL : http://developer.imendio.com/projects/devhelp
Summary : API document browser
Description :
An API document browser for GNOME 2.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. A flaw was found in the
processing of malformed JavaScript content. A web page containing such malicious
content could cause Firefox to crash or, potentially, execute arbitrary code as
the user running Firefox. (CVE-2008-1380) All Firefox users should upgrade to
these updated packages, which contain backported patches that correct these
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.13-16
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 0.13-15
- Rebuild against newer gecko
* Thu Feb 21 2008 Matthew Barnes <mbarnes(a)redhat.com> - 0.13-14
* Require gecko-devel in devhelp-devel subpackage (RH bug #433769).
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 0.13-13
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-12
- Rebuild against newer gecko
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 0.13-11
- Rebuild against newer gecko
* Fri Oct 19 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-10
- Rebuild against newer gecko
* Wed Jul 18 2007 Kai Engert <kengert(a)redhat.com> - 0.13-9
- Rebuild against newer gecko
* Fri May 25 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-8
- Rebuild against newer gecko
* Mon Apr 23 2007 Matthew Barnes <mbarnes(a)redhat.com> - 0.13-7.fc7
- Add patch for RH bug #230837 (initialize GThread).
* Sat Apr 21 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.13-6
- Don't install INSTALL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update devhelp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------