[SECURITY] Fedora 9 Update: blam-1.8.5-2.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : blam
Product : Fedora 9
Version : 1.8.5
Release : 2.fc9
URL : http://www.cmartin.tk/blam.html
Summary : An RSS/RDF feed reader
Description :
Blam is a tool that helps you keep track of the growing
number of news feeds distributed as RSS. Blam lets you
subscribe to any number of feeds and provides an easy to
use and clean interface to stay up to date
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.8.5-2
- Rebuild against newer gecko
* Mon Jul 21 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 1.8.5-1
- Update to upstream (1.8.5), fixes FTBS (#434382)
- Set gecko version to new xulrunner: 1.9.0.2
- BR: gecko-devel-unstable
- Drop a number of patches which no longer apply
- Add new icons to file list.
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.8.3-14
- Autorebuild for GCC 4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update blam' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: devhelp-0.19.1-4.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : devhelp
Product : Fedora 9
Version : 0.19.1
Release : 4.fc9
URL : http://developer.imendio.com/projects/devhelp
Summary : API document browser
Description :
An API document browser for GNOME 2.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 0.19.1-4
- Rebuild against newer gecko
* Wed Jul 16 2008 Christopher Aillon <caillon(a)redhat.com> - 0.19.1-3
- Rebuild against newer gecko
* Wed Jun 18 2008 Owen Taylor <otaylor(a)redhat.com> - 0.19.1-2
- Rebuild against xulrunner-1.9
* Mon May 26 2008 Matthew Barnes <mbarnes(a)redhat.com> - 0.19.1-1
- Update to 0.19.1
* Sun May 4 2008 Matthias Clasen <mclasen(a)redhat.com> - 0.19-5
- Fix source url
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update devhelp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: cairo-dock-1.6.2.3-1.fc9.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : cairo-dock
Product : Fedora 9
Version : 1.6.2.3
Release : 1.fc9.1
URL : http://www.cairo-dock.org/
Summary : Light eye-candy fully themable animated dock
Description :
An light eye-candy fully themable animated dock for any
Linux desktop. It has a family-likeness with OSX dock,
but with more options.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.6.2.3-1.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cairo-dock' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: xulrunner-1.9.0.2-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : xulrunner
Product : Fedora 9
Version : 1.9.0.2
Release : 1.fc9
URL : http://developer.mozilla.org/En/XULRunner
Summary : XUL Runtime for Gecko Applications
Description :
XULRunner provides the XUL Runtime environment for Gecko applications.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> 1.9.0.2-1
- Update to 1.9.0.2
* Wed Jul 16 2008 Christopher Aillon <caillon(a)redhat.com> 1.9.0.1-1
- Update to 1.9.0.1
* Mon Jun 30 2008 Dennis Gilmore <dennis(a)ausil.us> 1.9-1.1
- handle sparc arches
* Tue Jun 17 2008 Christopher Aillon <caillon(a)redhat.com> 1.9-1
- Update to 1.9 final
* Thu May 29 2008 Christopher Aillon <caillon(a)redhat.com> 1.9-0.63
- Simplify PS/PDF operators
* Thu May 22 2008 Christopher Aillon <caillon(a)redhat.com> 1.9-0.62
- Upstream patch to fsync() less
* Thu May 8 2008 Colin Walters <walters(a)redhat.com> 1.9-0.61
- Ensure we enable startup notification; add BR and modify config
(bug #445543)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xulrunner' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: firefox-3.0.2-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 9
Version : 3.0.2
Release : 1.fc9
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 23 2008 Christopher Aillon <caillon(a)redhat.com> 3.0.2-1
- Update to 3.0.2
* Wed Jul 16 2008 Christopher Aillon <caillon(a)redhat.com> 3.0.1-1
- Update to 3.0.1
* Tue Jun 17 2008 Christopher Aillon <caillon(a)redhat.com> 3.0-1
- Firefox 3 Final
* Thu May 8 2008 Colin Walters <walters(a)redhat.com> 3.0-0.61
- Rebuild to pick up new xulrunner (bug #445543)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: php-pear-Log-1.11.2-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7855
2008-09-27 03:05:35
--------------------------------------------------------------------------------
Name : php-pear-Log
Product : Fedora 9
Version : 1.11.2
Release : 1.fc9
URL : http://pear.php.net/package/Log
Summary : Abstracted logging facility for PHP
Description :
The Log framework provides an abstracted logging system.
It supports logging to console, file, syslog, SQL, Sqlite, mail, and mcal
targets. It also provides a subject - observer mechanism.
php-pear-Log can optionally use package "php-pear-DB" (version >= 1.3)
and "php-pear-MDB2" (version >= 2.0.0RC1).
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog Version 1.11.2 - Release date: 2008-09-05 05:03 UTC -
Correcting some breakage in Log::_getBacktraceVars().
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 5 2008 Remi Collet <Fedora(a)FamilleCollet.com> 1.11.2-1
- update to 1.11.2
* Wed Aug 6 2008 Remi Collet <Fedora(a)FamilleCollet.com> 1.11.1-1
- update to 1.11.1
* Sat Jun 28 2008 Remi Collet <Fedora(a)FamilleCollet.com> 1.11.0-1
- update to 1.11.0 : swicth from PHP to MIT license
* Thu May 8 2008 Remi Collet <Fedora(a)FamilleCollet.com> 1.10.1-1
- update to 1.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-Log' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: libUnihan-0.5.1-0.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8311
2008-09-27 03:05:17
--------------------------------------------------------------------------------
Name : libUnihan
Product : Fedora 9
Version : 0.5.1
Release : 0.fc9
URL : http://sourceforge.net/projects/libunihan
Summary : C library for Unihan character database in fifth normal form
Description :
libUnihan provides a C library for Unihan character database in fifth
normal form (5NF).
--------------------------------------------------------------------------------
Update Information:
- New Features: + PinYin accent format conversion functions (C and SQL
scalar). + ZhuYin tone mark format conversion functions (C and SQL scalar).
+ PinYin <--> ZhuYin conversion functions (C and SQL scalar). + Display as
ZhuYin. - Fixed: + Correct counting in FreqRank field of kMandarin table.
+ The query functions such as unihan_find_all_matched() returns SQL_Results
type, to avoid the memory leaking problems. - Changed: + unihanDb_open() now
supports the R/W control. + Changed CMakefile.txt to reflects the version
scheme change of UnihanDb + StringList type for storing const string arrays.
+ Add test suite. + Where-clause-generator is now able to escape the quote
character('). + unihan_field_validation is moved to test/, therefore it will
not be in binary package. + New make targets: rpm, srpm, rpm_db and srpm_db
to generate rpm and srpm for libUnihan and UnihanDb. - Removed: +
unihanSql_get_result_table(). As it uses sqlite3_get_table() which might cause
memory leak.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libUnihan' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: ganyremote-5.3-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8374
2008-09-27 03:01:37
--------------------------------------------------------------------------------
Name : ganyremote
Product : Fedora 9
Version : 5.3
Release : 1.fc9
URL : http://anyremote.sourceforge.net/
Summary : GTK frontend for anyRemote
Description :
gAnyRemote package is GTK GUI frontend for anyRemote
(http://anyremote.sourceforge.net/). The overall goal of this project is to
provide remote control service on Linux through Bluetooth, InfraRed, Wi-Fi
or TCP/IP connection.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ganyremote' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: messiggy-0.5.0-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8400
2008-09-27 03:03:23
--------------------------------------------------------------------------------
Name : messiggy
Product : Fedora 9
Version : 0.5.0
Release : 1.fc9
URL : http://www.coyotegulch.com/products/messiggy/index.html
Summary : Messiggy is a database of celestial objects
Description :
Messiggy is a database of celestial objects, as cataloged by the French
astronomer Charles Messier in the mid-18th century.
--------------------------------------------------------------------------------
Update Information:
Messiggy is a database of celestial objects.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #461376 - Review Request: itzam-core - Library for creating and manipulating keyed-access database files
https://bugzilla.redhat.com/show_bug.cgi?id=461376
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update messiggy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: gtk-vnc-0.3.7-2.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8382
2008-09-27 03:02:13
--------------------------------------------------------------------------------
Name : gtk-vnc
Product : Fedora 9
Version : 0.3.7
Release : 2.fc9
URL : http://gtk-vnc.sf.net/
Summary : A GTK widget for VNC clients
Description :
gtk-vnc is a VNC viewer widget for GTK. It is built using coroutines
allowing it to be completely asynchronous while remaining single threaded.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 25 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.3.7-2.fc9
- Allow pointer ungrab keysequence if already grabbed (rhbz #463729)
* Mon Sep 8 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.3.7-1.fc9
- Update to 0.3.7 release for crash fix (rhbz #461359)
* Thu Aug 28 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.3.6-2.fc9
- Fix key/mouse event propagation (rhbz #454627)
* Mon Jul 7 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.3.6-1.1
- fix conditional comparison
* Tue Jun 10 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.3.6-1.fc9
- Update to 0.3.6 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #463729 - virt-manager does not release mouse pointer after gtk-vnc update
https://bugzilla.redhat.com/show_bug.cgi?id=463729
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gtk-vnc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months