[SECURITY] Fedora 9 Update: kazehakase-0.5.5-1.fc9.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : kazehakase
Product : Fedora 9
Version : 0.5.5
Release : 1.fc9.1
URL : http://kazehakase.sourceforge.jp/
Summary : Kazehakase browser using Gecko rendering engine
Description :
Kazehakase is a Web browser which aims to provide
a user interface that is truly user-friendly & fully customizable.
This package uses Gecko for HTML rendering engine.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 0.5.5-1.1
- Rebuild against newer gecko
* Wed Jul 30 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.5-1
- 0.5.5
* Sat Jul 19 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.4-7.svn3506_trunk
- F-9+: relax gecko libs dependency (as GRE_GetGREPathWithProperties properly
finds out GRE)
- F-10+: add -UGTK_DISABLE_DEPRECATED temporarily
* Tue Jul 15 2008 Christopher Aillon <caillon(a)redhat.com>
- Rebuild against newer gecko (F-8)
* Wed Jul 2 2008 Christopher Aillon <caillon(a)redhat.com>
- Rebuild against newer gecko (F-8)
* Sat Jun 28 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.4-6.svn3506_trunk
- Try rev 3506
- Workaround for bug 447444 (xulrunner vs hunspell conflict) (F-9+)
* Wed Jun 25 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.4-5
- Apply xulrunner related patches from debian by Mike Hommey
(debian bug 480796, rh bug 402641)
This time kazehakase actually works with xulrunner!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kazehakase' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-21.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : gtkmozembedmm
Product : Fedora 9
Version : 1.4.2.cvs20060817
Release : 21.fc9
URL : http://gtkmm.sourceforge.net/
Summary : C++ wrapper for GtkMozembed
Description :
This package provides a C++/gtkmm wrapper for GtkMozEmbed
from Mozilla 1.4.x to 1.7.x.
The wrapper provides a convenient interface for C++ programmers
to use the Gtkmozembed HTML-rendering widget inside their software.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.4.2.cvs20060817-21
- Rebuild against newer gecko
* Fri Jun 20 2008 Martin Stransky <stransky(a)redhat.com> - 1.4.2.cvs20060817-20
- rebuild against new gecko-libs 1.9 (xulrunner)
* Sat Apr 12 2008 Haïkel Guémar <karlthered(a)gmail.com> - 1.4.2.cvs20060817-19
- remove now useless sed one-liner.
- fixed gtkmozembedmm-1.4.2.cvs20060817-xulrunner.patch
- added gtkmozembedmm-1.4.2.cvs20060817-m4.patch
* Mon Feb 18 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.4.2.cvs20060817-18
- Autorebuild for GCC 4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gtkmozembedmm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: google-gadgets-0.10.1-5.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : google-gadgets
Product : Fedora 9
Version : 0.10.1
Release : 5.fc9
URL : http://code.google.com/p/google-gadgets-for-linux/
Summary : Google Gadgets for Linux
Description :
Google Gadgets for Linux provides a platform for running desktop
gadgets under Linux, catering to the unique needs of Linux users. It
can run, without modification, many Google Desktop gadgets as well as
the Universal Gadgets on iGoogle.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update google-gadgets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: gnome-python2-extras-2.19.1-18.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : gnome-python2-extras
Product : Fedora 9
Version : 2.19.1
Release : 18.fc9
URL : http://www.pygtk.org/
Summary : The sources for additional. PyGNOME Python extension modules.
Description :
The gnome-python-extra package contains the source packages for additional
Python bindings for GNOME. It should be used together with gnome-python.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.19.1-18
- Rebuild against newer gecko
* Fri Jul 18 2008 Paul W. Frields <stickster(a)gmail.com> - 2.19.1-17.fc9
- Rebuild against new xulrunner (1.9.0.2) and fix dependencies
* Fri Jun 20 2008 Martin Stransky <stransky(a)redhat.com> - 2.19.1-16.fc9
- Rebuild against new gecko-libs 1.9 (xulrunner)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-python2-extras' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-14.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : gnome-web-photo
Product : Fedora 9
Version : 0.3
Release : 14.fc9
URL : http://ftp.gnome.org/pub/GNOME/sources/gnome-web-photo/0.3/
Summary : HTML pages thumbnailer
Description :
gnome-web-photo contains a thumbnailer that will be used by GNOME applications,
including the file manager, to generate screenshots of web pages.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 0.3-14
- Rebuild against newer gecko
* Mon Jul 21 2008 Martin Stransky <stransky(a)redhat.com> - 0.3-13
- Rebuild against new xulrunner
* Fri Jun 20 2008 Martin Stransky <stransky(a)redhat.com> - 0.3-12
- Rebuild against new xulrunner
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-web-photo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-3.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : evolution-rss
Product : Fedora 9
Version : 0.1.0
Release : 3.fc9
URL : http://gnome.eu.org/evo/index.php/Evolution_RSS_Reader_Plugin
Summary : Evolution RSS Reader
Description :
This is an evolution plugin which enables evolution to read rss feeds.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 0.1.0-3
- Rebuild against newer gecko
* Sat Jul 5 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.1.0-2
- Fix firefox import RH bug #452322
* Wed Jul 2 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.1.0-1
- Update to 0.1.0 version
* Wed Apr 30 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-9
- Update requirements
* Mon Apr 7 2008 Lucian Langa <cooly(a)gnome.eu.org> - 0.0.8-8
- Force gecko default html render
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update evolution-rss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: galeon-2.0.5-3.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : galeon
Product : Fedora 9
Version : 2.0.5
Release : 3.fc9
URL : http://galeon.sourceforge.net/
Summary : GNOME2 Web browser based on Mozilla
Description :
Galeon is a web browser built around Gecko (Mozilla's rendering
engine) and Necko (Mozilla's networking engine). It's a GNOME web
browser, designed to take advantage of as many GNOME technologies as
makes sense. Galeon was written to do just one thing - browse the web.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.0.5-3
- Rebuild against newer gecko
* Wed Jun 18 2008 Denis Leroy <denis(a)poolshark.org> - 2.0.5-2
- Rebuild with xulrunner 1.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update galeon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-4.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : epiphany-extensions
Product : Fedora 9
Version : 2.22.1
Release : 4.fc9
URL : http://www.gnome.org/projects/epiphany/extensions
Summary : Extensions for Epiphany, the GNOME web browser
Description :
Epiphany Extensions is a collection of extensions for Epiphany, the
GNOME web browser.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.1-4
- Rebuild against newer gecko
* Thu Jul 17 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.1-3
- Rebuild against newer gecko
* Sun Jun 22 2008 Martin Stransky <stransky(a)redhat.com> - 2.22.1-2
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany-extensions' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: chmsee-1.0.1-5.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 9
Version : 1.0.1
Release : 5.fc9
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.0.1-5
- Rebuild against newer gecko
* Fri Jun 20 2008 Martin Stransky <stransky(a)redhat.com> - 1.0.1-4
- Rebuild against new xulrunner
* Sat May 17 2008 bbbush <bbbush.yuan(a)gmail.com> - 1.0.1-3
- update to 1.0.1
- specify gecko-provider to "libxul", add nspr in patch to configure
- BR libgcrypt-devel instead of openssl-devel
* Fri Apr 25 2008 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-2.37
- patch from Martin Stransky to fix crash on open files (rh#427622)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months
[SECURITY] Fedora 9 Update: epiphany-2.22.2-4.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 9
Version : 2.22.2
Release : 4.fc9
URL : http://www.gnome.org/projects/epiphany/
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
Epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.2-4
- Rebuild against newer gecko
* Wed Jul 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.2-3
- Rebuild against newer gecko
* Wed Jun 18 2008 Martin Stransky <stransky(a)redhat.com> - 2.22.2-2
- Rebuild against xulrunner
* Wed May 28 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.22.2-1
- Update to 2.22.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 6 months