[SECURITY] Fedora 11 Update: firefox-3.5.4-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 11
Version : 3.5.4
Release : 1.fc11
URL : http://www.mozilla.org/projects/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 26 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.4-1
- Updated to 3.5.4
* Mon Sep 7 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.3-1
- Updated to 3.5.3.
* Thu Aug 6 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.2-3
- Fix for #437596 - Firefox needs to register proper name
for session restore.
* Mon Aug 3 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.2-2
- Updated to 3.5.2.
* Fri Jul 24 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.1-3
- Adjust icons cache update according to template
* Wed Jul 22 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.1-2
- New icons fixed
* Fri Jul 17 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.1-1
- Updated to 3.5.1.
* Tue Jul 7 2009 Jan Horak <jhorak(a)redhat.com> - 3.5-2
- Updated icon
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 3.5-1
- Firefox 3.5 final release
* Tue May 26 2009 Martin Stransky <stransky(a)redhat.com> - 3.5-0.21
- fix for #502541 - Firefox version should depend
on Xulrunner but does not
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
[SECURITY] Fedora 11 Update: galeon-2.0.7-17.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : galeon
Product : Fedora 11
Version : 2.0.7
Release : 17.fc11
URL : http://galeon.sourceforge.net/
Summary : GNOME2 Web browser based on Mozilla
Description :
Galeon is a web browser built around Gecko (Mozilla's rendering
engine) and Necko (Mozilla's networking engine). It's a GNOME web
browser, designed to take advantage of as many GNOME technologies as
makes sense. Galeon was written to do just one thing - browse the web.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-17
- Rebuild against newer gecko
* Fri Sep 25 2009 Denis Leroy <denis(a)poolshark.org> - 2.0.7-16
- Added patch from Yanko Kaneti (#525417) to fix crash on startup
* Wed Sep 23 2009 Denis Leroy <denis(a)poolshark.org> - 2.0.7-15
- Added jsconsole patch
- Changed default home location, Mandriva patch
- Disable plugins wrap patch, causing spurious crashes
- Made gecko libs Rs and BRs exact (#515640)
* Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-14
- Rebuild against newer gecko
* Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.0.7-13
- Rebuild against newer gecko
* Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-12
- Rebuild against newer gecko
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.0.7-11
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update galeon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
[SECURITY] Fedora 11 Update: epiphany-2.26.3-5.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 11
Version : 2.26.3
Release : 5.fc11
URL : http://www.gnome.org/projects/epiphany/
Summary : Web browser for GNOME
Description :
Epiphany is the web browser for the GNOME desktop. Its goal is to be
simple and easy to use. Epiphany ties together many GNOME components
in order to let you focus on the Web content, instead of the browser
application.
Epiphany is extensible through a plugin system. Existing plugins can be
found in the epiphany-extensions package.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-5
- Rebuild against newer gecko
* Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-4
- Rebuild against newer gecko
* Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.3-3
- Rebuild against newer gecko
* Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-2
- Rebuild against newer gecko
* Wed Jul 1 2009 Matthias Clasen <mclasen(a)redhat.com> - 2.26.3-1
- Update to 2.26.3
- See http://download.gnome.org/sources/epiphany/2.26/epiphany-2.26.3.changes
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.2-2
- Rebuild against newer gecko
* Mon Jun 1 2009 Matthias Clasen <mclasen(a)redhat.com> - 2.26.2-1
- Update to 2.26.2
- See http://download.gnome.org/sources/epiphany/2.26/epiphany-2.26.2.changes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-7.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : epiphany-extensions
Product : Fedora 11
Version : 2.26.1
Release : 7.fc11
URL : http://www.gnome.org/projects/epiphany/extensions
Summary : Extensions for Epiphany, the GNOME web browser
Description :
Epiphany Extensions is a collection of extensions for Epiphany, the
GNOME web browser.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.1-7
- Rebuild against newer gecko
* Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.1-6
- Rebuild against newer gecko
* Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-5
- Rebuild against newer gecko
* Fri Jul 17 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-4
- Rebuild against newer gecko
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-3
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany-extensions' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
[SECURITY] Fedora 11 Update: blam-1.8.5-15.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : blam
Product : Fedora 11
Version : 1.8.5
Release : 15.fc11
URL : http://www.cmartin.tk/blam.html
Summary : An RSS/RDF feed reader
Description :
Blam is a tool that helps you keep track of the growing
number of news feeds distributed as RSS. Blam lets you
subscribe to any number of feeds and provides an easy to
use and clean interface to stay up to date
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-15
- Rebuild against newer gecko
* Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-14
- Rebuild against newer gecko
* Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 1.8.5-13
- Rebuild against newer gecko
* Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-12
- Rebuild against newer gecko
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 1.8.5-11
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update blam' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
[SECURITY] Fedora 11 Update: chmsee-1.0.1-12.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10878
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 11
Version : 1.0.1
Release : 12.fc11
URL : http://code.google.com/p/chmsee
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.4, fixing multiple security issues
detailed in the upstream advisories: http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-12
- Rebuild against newer gecko
* Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-11
- Rebuild against newer gecko
* Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 1.0.1-10
- Rebuild against newer gecko
* Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-9
- Rebuild against newer gecko
* Tue Jul 14 2009 bbbush <bbbush.yuan(a)gmail.com> - 1.0.1-8
- revert to 1.0.1 as latest version crash on xulrunner-1.9.1.2
* Sun Jul 12 2009 bbbush <bbbush.yuan(a)gmail.com> - 1.0.6-1
- update to 1.0.6
- update project location. Chmsee moved to google code since 2009-01-05,
co-maintained by Li Daobing and Jungle Ji
- update build steps to use CMake
- Chmsee 1.0.3 was released on 2009-01-10, added "copy page location" in
context menu, updated translation
- Chmsee 1.0.4 was released on 2009-03-14, added "drag and drop" support,
dropped cs2w
- Chmsee 1.0.5 was released on 2009-05-17, added fullscreen support, switched
to CMake, supported 6 more new languages
- Chmsee 1.0.6 was released on 2009-07-12, added index support, supported 8
more new languages
* Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 1.0.1-7
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=530567
[ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
https://bugzilla.redhat.com/show_bug.cgi?id=530168
[ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
https://bugzilla.redhat.com/show_bug.cgi?id=530167
[ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
https://bugzilla.redhat.com/show_bug.cgi?id=530162
[ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
https://bugzilla.redhat.com/show_bug.cgi?id=530157
[ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
https://bugzilla.redhat.com/show_bug.cgi?id=530156
[ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
https://bugzilla.redhat.com/show_bug.cgi?id=530155
[ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
https://bugzilla.redhat.com/show_bug.cgi?id=524815
[ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 10 Update: fedora-security-guide-en-US-1.0-19.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10877
2009-10-29 02:34:53
--------------------------------------------------------------------------------
Name : fedora-security-guide-en-US
Product : Fedora 10
Version : 1.0
Release : 19.fc10
URL : http://docs.fedoraproject.org
Summary : A Guide to Securing Fedora Linux
Description :
The Linux Security Guide is designed to assist users of Linux in
learning the processes and practices of securing workstations and
servers against local and remote intrusion, exploitation, and
malicious activity. The Linux Security Guide details the planning
and the tools involved in creating a secured computing environment
for the data center, workplace, and home. With proper
administrative knowledge, vigilance, and tools, systems running
Linux can be both fully functional and secured from most common
intrusion and exploit methods.
--------------------------------------------------------------------------------
Update Information:
Updated license to CC-BY-SA.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fedora-security-guide-en-US' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 10 Update: monitor-edid-2.4-1.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10624
2009-10-21 00:09:26
--------------------------------------------------------------------------------
Name : monitor-edid
Product : Fedora 10
Version : 2.4
Release : 1.fc10
URL : http://wiki.mandriva.com/en/Tools/monitor-edid
Summary : Tool for probing and parsing monitor EDID
Description :
Monitor-edid is a tool for probing and parsing Extended display
identification data (EDID) from monitors.
For more information about EDID, see http://en.wikipedia.org/wiki/EDID
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog Version 2.4 - monitor-parse-edid: o ignore the
Manufacturer Specified Range Timing descriptor if the first detailed timing
descriptor appears to violate it (this probably means that the descriptor is
actually something else or in a different format; this fixes Lenovo W500
detection, reported by Udo Rader) Version 2.3 - monitor-get-edid-using-
vbe: o update x86emu from xserver git (fixes issues at least with newish
NVIDIA cards) o check if the port supports DDC before trying to read EDID
data (this should prevent problems when probing nonexistent ports on old cards)
- monitor-edid, monitor-get-edid: o probe ports 0-2 by default instead of
just 0-1 (many NVIDIA cards seem to be using port 2 and the changes in monitor-
get-edid-using-vbe should make it safe for old problematic NVIDIA cards as well)
Version 2.2 - monitor-edid, monitor-get-edid: o support getting EDID from
kernel DRM when kernel mode-setting is enabled (Anssi Hannula) - monitor-probe-
using-X: o use resolution from LVDS initial mode when X reports that it is
exact, making it work with nouveau driver (Anssi Hannula) Version 2.1 -
monitor-parse-edid: o compute and display the "dpi" of the preferred
modelines o handle parsing of EDIDs found in "xrandr --prop" or Xorg.log -
monitor-get-edid-using-vbe: o fix checking the current vt o instead of
checking vt >= 7 to know if X is running, check wether $DISPLAY is set
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 17 2009 Remi Collet <Fedora(a)famillecollet.com> 2.4-1
- new version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update monitor-edid' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 10 Update: audacious-plugins-1.5.1-15.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10574
2009-10-21 00:07:51
--------------------------------------------------------------------------------
Name : audacious-plugins
Product : Fedora 10
Version : 1.5.1
Release : 15.fc10
URL : http://audacious-media-player.org/
Summary : Plugins for the Audacious media player
Description :
Audacious is a media player that currently uses a skinned user interface
based on Winamp 2.x skins. It is based on ("forked off") BMP.
This package provides essential plugins for audio input, audio output and
visualization.
--------------------------------------------------------------------------------
Update Information:
* Fix sndfile plugin playback. * Patch "pulse_audio" output plugin to not get
confused by volume level changes passed in via callback. Volume level now
doesn't change when starting the next track. * Patch "pulse_audio" output
plugin to not suffer from precision-loss when saving the volume level in
Audacious config file. * Patch alsa-ng plugin with some buffer prefilling to
fight underruns. * Merge minor changes from 2.2 alpha1 alsa-ng plugin.
[Please note that if you use external mixers / volume controls to alter the
volume level, Audacious older than 2.2 (which is still being developed) does not
reflect that with its own volume slider. So, if you switch between multiple
volume controls often, you can experience big jumps in volume level going
up/down.]
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 28 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-15
- Remove decode_thread from sndfile plugin to fix playback.
* Wed Oct 21 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-14
- Set buffer_time_min in underruns patch. Depend on default buffer size.
* Wed Oct 21 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-13
- Patch pulseaudio plugin to not suffer from precision loss when
calculating the volume level to save.
* Mon Oct 19 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-12
- Patch pulseaudio plugin to not get confused by volume values passed
in via callback.
* Sat Sep 19 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-11
- Patch alsa-ng plugin with some buffer prefilling to fight underruns.
- Merge minor changes from 2.2 alpha1 alsa-ng plugin.
* Thu Jul 2 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-10
- Prevent alsalib mixer crash if mixer isn't ready.
* Mon Jun 29 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-9
- Use old "ALSA" plugin id for config file.
- Keep old mixer level even if mixer isn't ready.
* Mon Jun 29 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-8
- Replace old ALSA output plugin and related patches with the
"alsa-ng" code from Audacious 2.1 development. This is supposed to
get rid of old cruft and mutex-locking overhead that cause performance
regression in 1.5.1-6.
* Fri Jun 5 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-7
- Remove unapplied patches and verify that they have been merged.
- Multiple different licenses are used for the individual plugins.
- Move amidi-plug directory to amidi subpackage.
* Thu Jun 4 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-6
- Apply ALSA driver patches by Hans de Goede (#499942).
- Minor spec updates.
- Update scriptlets in accordance with guidelines.
- Build with libsndfile plugin for advanced formats in WAV and
patch it for pause and seek (also fixes #501007).
* Wed May 6 2009 Ralf Ertzinger <ralf(a)skytale.net> 1.5.1-5
- Fix possible crash on neon buffer underrun (BZ#496413)
* Fri May 1 2009 Ralf Ertzinger <ralf(a)skytale.net> 1.5.1-4
- Accept .oga files (BZ#479120)
- Look for timitidy.cfg in /etc (BZ#450933)
- Fix missing symbols in amidi-plugin (BZ#478557)
- Include CD-audio plugin (BZ#442921)
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update audacious-plugins' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: perl-Curses-UI-0.9607-2.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-9870
2009-09-24 04:15:03
--------------------------------------------------------------------------------
Name : perl-Curses-UI
Product : Fedora 11
Version : 0.9607
Release : 2.fc11
URL : http://search.cpan.org/dist/Curses-UI/
Summary : Curses based OO user interface framework
Description :
Curses::UI is an object-oriented user interface framework for Perl.
--------------------------------------------------------------------------------
Update Information:
An object-oriented user interface framework for Perl.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #516271 - Review Request: perl-Curses-UI - Curses based OO user interface framework
https://bugzilla.redhat.com/show_bug.cgi?id=516271
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Curses-UI' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months