[SECURITY] Fedora 8 Update: evolution-rss-0.0.8-12.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : evolution-rss
Product : Fedora 8
Version : 0.0.8
Release : 12.fc8
URL : http://gnome.eu.org/evo/index.php/Evolution_RSS_Reader_Plugin
Summary : Evolution RSS Reader
Description :
This is an evolution plugin which enables evolution to read rss feeds.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 0.0.8-12
- Rebuild against newer gecko
* Wed Jul 16 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-11
- Rebuild against newer gecko (1.8.1.17)
* Mon Jul 7 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-10
- Rebuild against newer gecko (1.8.1.15)
* Mon Apr 28 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-9
- Rebuild against newer gecko (1.8.1.14)
* Thu Apr 10 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-8
- Make gecko primary render engine
- Force gecko-libs as required deps
* Fri Mar 28 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-7
- Rebuild against newer gecko
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update evolution-rss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-10.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : epiphany-extensions
Product : Fedora 8
Version : 2.20.1
Release : 10.fc8
URL : http://www.gnome.org/projects/epiphany/extensions
Summary : Extensions for Epiphany, the GNOME web browser
Description :
Epiphany Extensions is a collection of extensions for Epiphany, the
GNOME web browser.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-10
- Rebuild against newer gecko
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-9
- Rebuild against newer gecko
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-8
- Rebuild against newer gecko
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-7
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-6
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-5
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-3
- Rebuild against newer gecko
* Tue Nov 6 2007 Peter Gordon <peter(a)thecodergeek.com> - 2.20.1-2
- Rebuild for new Gecko (Firefox 2.0.0.9)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany-extensions' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: devhelp-0.16.1-10.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : devhelp
Product : Fedora 8
Version : 0.16.1
Release : 10.fc8
URL : http://developer.imendio.com/projects/devhelp
Summary : API document browser
Description :
An API document browser for GNOME 2.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-10
- Rebuild against newer gecko
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-9
- Rebuild against newer gecko
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-8
- Rebuild against newer gecko
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-7
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-6
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-5
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 0.16.1-4
- Rebuild against newer gecko
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 0.16.1-3.fc8
- rebuild against new firefox
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update devhelp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: epiphany-2.20.3-7.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 8
Version : 2.20.3
Release : 7.fc8
URL : http://www.gnome.org/projects/epiphany/
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-7
- Rebuild against newer gecko
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-6
- Rebuild against newer gecko
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-5
- Rebuild against newer gecko
* Sun Apr 27 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-4
- Stop shipping LowContrastLargePrint icons
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-3
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-2
- Rebuild against newer gecko
* Sat Mar 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.3-1
- Update to 2.20.3
* Sat Mar 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.2-4
- Update the useragent for Fedora
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 2.20.2-3
- Rebuild against newer gecko
* Thu Nov 29 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.2-2
- Polished wrapper patch
* Tue Nov 27 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.20.2-1
- Update to 2.20.2
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-6
- Rebuild against newer gecko
* Mon Nov 19 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-5
- Updated wrapper patch
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-4
- Rebuild against new firefox
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: cairo-dock-1.6.2.3-1.fc8.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : cairo-dock
Product : Fedora 8
Version : 1.6.2.3
Release : 1.fc8.1
URL : http://www.cairo-dock.org/
Summary : Light eye-candy fully themable animated dock
Description :
An light eye-candy fully themable animated dock for any
Linux desktop. It has a family-likeness with OSX dock,
but with more options.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cairo-dock' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: chmsee-1.0.0-4.31.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 8
Version : 1.0.0
Release : 4.31.fc8
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-4.31
- Rebuild against newer gecko
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-3.31
- Rebuild against newer gecko
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-2.31
- Rebuild against newer gecko
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-2.30
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.30
- Rebuild against newer gecko
* Tue Mar 4 2008 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.29
- re-add firefox_version
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.28
- Rebuild against newer gecko
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: firefox-2.0.0.17-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 8
Version : 2.0.0.17
Release : 1.fc8
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.17-1
- Update to 2.0.0.17
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.16-1
- Update to 2.0.0.16
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.15-1
- Update to 2.0.0.15
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.14-1
- Update to 2.0.0.14
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.13-1
- Update to 2.0.0.13
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.12-1
- Update to 2.0.0.12
* Thu Dec 13 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-3
- Fix the getStartPage method to not return blank.
Patch by pspencer(a)fields.utoronto.ca
* Wed Nov 28 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-2
- Make Canvas.drawImage work again
* Mon Nov 26 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.10-1
- Update to 2.0.0.10
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> 2.0.0.9-1
- updated to the latest upstream
* Wed Oct 31 2007 Martin Stransky <stransky(a)redhat.com> 2.0.0.8-3
- added mozilla-plugin-config to startup script
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 8 Update: blam-1.8.3-18.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8399
2008-09-27 03:03:19
--------------------------------------------------------------------------------
Name : blam
Product : Fedora 8
Version : 1.8.3
Release : 18.fc8
URL : http://www.cmartin.tk/blam.html
Summary : An RSS/RDF feed reader
Description :
Blam is a tool that helps you keep track of the growing
number of news feeds distributed as RSS. Blam lets you
subscribe to any number of feeds and provides an easy to
use and clean interface to stay up to date
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-18
- Rebuild against newer gecko
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-17
- Rebuild against newer gecko
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-16
- Rebuild against newer gecko
* Wed Apr 16 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-15
- Rebuild against newer gecko
* Tue Mar 25 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-14
- Rebuild against newer gecko
* Fri Feb 8 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-13
- Rebuild against newer gecko
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.8.3-12
- Rebuild against newer gecko
* Thu Nov 22 2007 Peter Gordon <peter(a)thecodergeek.com> - 1.8.3-11
- Fix CVE-2005-4790 (bug 252294).
* Tue Nov 13 2007 Peter Gordon <peter(a)thecodergeek.com> - 1.8.3-10
- Rebuild for new Gecko (Firefox 2.0.0.9).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update blam' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
Fedora 8 Update: jbrout-0.2.201-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-5807
2008-09-27 03:05:20
--------------------------------------------------------------------------------
Name : jbrout
Product : Fedora 8
Version : 0.2.201
Release : 2.fc8
URL : http://jbrout.python-hosting.com/wiki
Summary : Photo manager, written in python/pygtk
Description :
jBrout is able to :
* manage albums/photos (= folders/files)
* tag photos with IPTC keywords
* use internal jpeg thumbnail
* comment photos (with jpeg comment) and album (textfile in
folder)
* rotate loss-less jpeg (and internal jpeg thumbnail)
use EXIF info (date, size ..)
* search pictures (tags, comment, date, ...) (not implemented
yet)
* use plugins (to export to html/gallery, to act like
a httpserver, to export pictures to be mailed, ...)
* work without database ! (just a xmlfile which can be rebuild
from scratch)
* handle a lot of photos (jbrout's author claims to have more than 20000
of them)
* upload photos to a flickr account
* ...
--------------------------------------------------------------------------------
Update Information:
Initial build of the new package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jbrout' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
Fedora 8 Update: monotone-0.41-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8110
2008-09-27 03:02:00
--------------------------------------------------------------------------------
Name : monotone
Product : Fedora 8
Version : 0.41
Release : 1.fc8
URL : http://monotone.ca/
Summary : A free, distributed version control system
Description :
monotone is a free, distributed version control system.
It provides fully disconnected operation, manages complete
tree versions, keeps its state in a local transactional
database, supports overlapping branches and extensible
metadata, exchanges work over plain network protocols,
performs history-sensitive merging, and delegates trust
functions to client-side RSA certificates.
--------------------------------------------------------------------------------
Update Information:
Update to 0.41. This version fixes some annoying bugs and adds a few new
features, mainly in the automation interface.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 12 2008 Thomas Moschny <thomas.moschny(a)gmx.de> - 0.41-1
- Updated for 0.41 release.
- Added mtnopt helper.
* Mon Aug 11 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.40-2
- fix license tag
* Mon Apr 14 2008 Roland McGrath <roland(a)redhat.com> - 0.40-1
- Updated for 0.40 release.
- Tweaked trivia for packaging guidelines nits.
* Mon Feb 25 2008 Roland McGrath <roland(a)redhat.com> - 0.39-1
- Updated for 0.39 release.
* Sat Dec 22 2007 Roland McGrath <roland(a)redhat.com> - 0.38-2
- Fix monotone-server user creation. (#426607)
- Moved monotone-server database to /var/lib. (#426608)
- Use monotone@ in server key name. (#426609)
* Fri Dec 21 2007 Roland McGrath <roland(a)redhat.com> - 0.38-1
- Updated for 0.38 release.
* Sat Oct 27 2007 Roland McGrath <roland(a)redhat.com> - 0.37-3
- Updated for 0.37 release.
- Prevent destroying old passphrase file with 'service monotone genkey'.
- Put LSB standard comments in monotone.init for monotone-server subpackage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #442420 - monotone-0.40 is available
https://bugzilla.redhat.com/show_bug.cgi?id=442420
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update monotone' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months