Re: Firefox at 3.6.7 that has known security bugs, all the while 3 newer versions where released in 54 days.
by Bram_Gro
On 09/20/2010 02:47 PM, Ankur Sinha wrote:
> On Mon, 2010-09-20 at 14:30 +0200, Bram_Gro wrote:
>> On 09/20/2010 01:34 PM, Ankur Sinha wrote:
>>> On Mon, 2010-09-20 at 13:19 +0200, Bram_Gro wrote:
>>>> We are stuck with Firefox at 3.6.7 that has known security bugs, all
>>>> the while 3 newer versions where released in 54 days.
>>>>
>>>>
>>>> v.3.6.10, released September 15th:
>>>>
>>>> Fixed a single stability issue affecting a limited number of users
>>>>
>>>> v.3.6.9, released September 7th, 2010
>>>>
>>>> MFSA 2010-63 Information leak via XMLHttpRequest statusText
>>>> MFSA 2010-62 Copy-and-paste or drag-and-drop into designMode document
>>>> allows XSS
>>>> MFSA 2010-61 UTF-7 XSS by overriding document charset using<object>
>>>> type attribute
>>>> MFSA 2010-59 SJOW creates scope chains ending in outer object
>>>> MFSA 2010-58 Crash on Mac using fuzzed font in data: URL
>>>> MFSA 2010-57 Crash and remote code execution in normalizeDocument
>>>> MFSA 2010-56 Dangling pointer vulnerability in nsTreeContentView
>>>> MFSA 2010-55 XUL tree removal crash and remote code execution
>>>> MFSA 2010-54 Dangling pointer vulnerability in nsTreeSelection
>>>> MFSA 2010-53 Heap buffer overflow in nsTextFrameUtils::TransformText
>>>> MFSA 2010-52 Windows XP DLL loading vulnerability
>>>> MFSA 2010-51 Dangling pointer vulnerability using DOM plugin array
>>>> MFSA 2010-50 Frameset integer overflow vulnerability
>>>> MFSA 2010-49 Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12)
>>>>
>>>> v.3.6.8, released July 23rd, 2010
>>>>
>>>> MFSA 2010-48 Dangling pointer crash regression from plugin parameter
>>>> array fix
>>>>
>>>>
>>>> This should be promptly corrected!
>>>>
>>>
>>> I can see a build in koji for it[1]. Please file a bug requesting the
>>> maintainer to submit the build as an update. For some reason, the build
>>> has not been submitted to testing.
>>>
>>> [1]
>>>> http://koji.fedoraproject.org/koji/packageinfo?packageID=37
>>>
>> I Get Error code: ssl_error_handshake_failure_alert when trying to
>> create a account and login at http://koji.fedoraproject.org/koji/login
>> to contact Xhorak, or for the general submittal of a update request.
>>
>
> hi,
>
> you need to signup at bugzilla.redhat.com and submit a bug there.
>
https://bugzilla.redhat.com/show_bug.cgi?id=635659 (priority should have
been urgent).
13 years, 8 months
Problem controlling display/screen with xorg.conf
by Dick Roark
Along with (apparently) other OPs, I am having problems with my F13 screen.
Fedora works well but I am not able to configure a 1280x1024 display. I have
generated xorg.conf using system-config-display. When I put it in the X11
folder and reboot, the system stops short of booting a kernel and stops in a
non-GUI mode. With a clean install, I am able to install F13 with a 1024x768
and smaller displays. From the postings, I can see that others are having
the same problem. My last attempt was from an nicely working 1024x768
system. I generated xorg.conf using system-config-display, edited it to
incude 1280x1024 and placed it in X11. When I rebooted, the system came up
in a non-GUI init. I hope someone can supply the last step to this puzzle.
Thanks.
13 years, 8 months
Re: Firefox at 3.6.7 that has known security bugs, all the while 3 newer versions where released in 54 days.
by Ankur Sinha
On Mon, 2010-09-20 at 15:28 +0200, Bram_Gro wrote:
> On 09/20/2010 02:47 PM, Ankur Sinha wrote:
> > On Mon, 2010-09-20 at 14:30 +0200, Bram_Gro wrote:
> >> On 09/20/2010 01:34 PM, Ankur Sinha wrote:
> >>> On Mon, 2010-09-20 at 13:19 +0200, Bram_Gro wrote:
> >>>> We are stuck with Firefox at 3.6.7 that has known security bugs, all
> >>>> the while 3 newer versions where released in 54 days.
> >>>>
> >>>>
> >>>> v.3.6.10, released September 15th:
> >>>>
> >>>> Fixed a single stability issue affecting a limited number of users
> >>>>
> >>>> v.3.6.9, released September 7th, 2010
> >>>>
> >>>> MFSA 2010-63 Information leak via XMLHttpRequest statusText
> >>>> MFSA 2010-62 Copy-and-paste or drag-and-drop into designMode document
> >>>> allows XSS
> >>>> MFSA 2010-61 UTF-7 XSS by overriding document charset using<object>
> >>>> type attribute
> >>>> MFSA 2010-59 SJOW creates scope chains ending in outer object
> >>>> MFSA 2010-58 Crash on Mac using fuzzed font in data: URL
> >>>> MFSA 2010-57 Crash and remote code execution in normalizeDocument
> >>>> MFSA 2010-56 Dangling pointer vulnerability in nsTreeContentView
> >>>> MFSA 2010-55 XUL tree removal crash and remote code execution
> >>>> MFSA 2010-54 Dangling pointer vulnerability in nsTreeSelection
> >>>> MFSA 2010-53 Heap buffer overflow in nsTextFrameUtils::TransformText
> >>>> MFSA 2010-52 Windows XP DLL loading vulnerability
> >>>> MFSA 2010-51 Dangling pointer vulnerability using DOM plugin array
> >>>> MFSA 2010-50 Frameset integer overflow vulnerability
> >>>> MFSA 2010-49 Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12)
> >>>>
> >>>> v.3.6.8, released July 23rd, 2010
> >>>>
> >>>> MFSA 2010-48 Dangling pointer crash regression from plugin parameter
> >>>> array fix
> >>>>
> >>>>
> >>>> This should be promptly corrected!
> >>>>
> >>>
> >>> I can see a build in koji for it[1]. Please file a bug requesting the
> >>> maintainer to submit the build as an update. For some reason, the build
> >>> has not been submitted to testing.
> >>>
> >>> [1]
> >>>> http://koji.fedoraproject.org/koji/packageinfo?packageID=37
> >>>
> >> I Get Error code: ssl_error_handshake_failure_alert when trying to
> >> create a account and login at http://koji.fedoraproject.org/koji/login
> >> to contact Xhorak, or for the general submittal of a update request.
> >>
> >
> > hi,
> >
> > you need to signup at bugzilla.redhat.com and submit a bug there.
> >
>
> https://bugzilla.redhat.com/show_bug.cgi?id=635659 (priority should have
> been urgent).
>
Thank you for the bug report.
--
Thanks!
Regards,
Ankur
https://fedoraproject.org/wiki/User:Ankursinha
"FranciscoD"
13 years, 8 months
Firefox at 3.6.7 that has known security bugs, all the while 3 newer versions where released in 54 days.
by Bram_Gro
We are stuck with Firefox at 3.6.7 that has known security bugs, all
the while 3 newer versions where released in 54 days.
v.3.6.10, released September 15th:
Fixed a single stability issue affecting a limited number of users
v.3.6.9, released September 7th, 2010
MFSA 2010-63 Information leak via XMLHttpRequest statusText
MFSA 2010-62 Copy-and-paste or drag-and-drop into designMode document
allows XSS
MFSA 2010-61 UTF-7 XSS by overriding document charset using <object>
type attribute
MFSA 2010-59 SJOW creates scope chains ending in outer object
MFSA 2010-58 Crash on Mac using fuzzed font in data: URL
MFSA 2010-57 Crash and remote code execution in normalizeDocument
MFSA 2010-56 Dangling pointer vulnerability in nsTreeContentView
MFSA 2010-55 XUL tree removal crash and remote code execution
MFSA 2010-54 Dangling pointer vulnerability in nsTreeSelection
MFSA 2010-53 Heap buffer overflow in nsTextFrameUtils::TransformText
MFSA 2010-52 Windows XP DLL loading vulnerability
MFSA 2010-51 Dangling pointer vulnerability using DOM plugin array
MFSA 2010-50 Frameset integer overflow vulnerability
MFSA 2010-49 Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12)
v.3.6.8, released July 23rd, 2010
MFSA 2010-48 Dangling pointer crash regression from plugin parameter
array fix
This should be promptly corrected!
13 years, 8 months
Problem with Hauppauge WinTV-HVR-4000 - gnomeradio
by Jon Ingason
I am having some problem with my Hauppauge WinTV-HVR-4000 card. One of
these problems is starting radio. When I start gnomeradio I get error:
Can't open "/dev/mixer"
Which is not surprising since "/dev/mixer" does not exist. The question
is why does it not exist?
After little search I found PDF document "Ask_Klaus!.pdf" about how to
probing drivers for soundcards in Fedora 4. There he describ how to make
"/dev/mixer" and "/dev/dsp" (which also didn't exist).
I made these devices. I started gnomeradio and it started seaching for
station but didn't find any.
I have tryed radio from the XawTV and fmscan from fmtools without any
results. Wander if some have had luck with the radio part of this card?
I'm runing F13.
--
Regards
Jon Ingason
13 years, 8 months
Screen Resolution in Fedora 13 on Intel i915 Chipset
by Samuel Kidman
Hello
I'm having an issue increasing my screen resolution in Fedora Core 13. The
only resolution options available to me in System>Preferences>Monitors are
1024x768, 800x600, 848x480, and 640x480.
>From xorg.0.log:
[ 71408.317] (II) intel(0): Printing probed modes for output VGA1
[ 71408.317] (II) intel(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184
1344 768 771 777 806 -hsync -vsync (48.4 kHz)
[ 71408.317] (II) intel(0): Modeline "800x600"x60.3 40.00 800 840 968
1056 600 601 605 628 +hsync +vsync (37.9 kHz)
[ 71408.318] (II) intel(0): Modeline "800x600"x56.2 36.00 800 824 896
1024 600 601 603 625 +hsync +vsync (35.2 kHz)
[ 71408.318] (II) intel(0): Modeline "848x480"x60.0 33.75 848 864 976
1088 480 486 494 517 +hsync +vsync (31.0 kHz)
[ 71408.318] (II) intel(0): Modeline "640x480"x59.9 25.18 640 656 752
800 480 489 492 525 -hsync -vsync (31.5 kHz)
I am certain the i915 chipset is capable of more modes than this, because I
had a much higher screen resolution at install. How come I'm not getting all
of the modes available on my video card?
This problem only started happening after I plugged my computer into my
HDTV- the screen resolution automatically adjusted to the new monitor, and
when I changed i tried to increase the screen resolution again, I had all of
the options that I should get but selecting one caused an error and my
screen resolution changed to what it is now (1024x768) and I have since been
unable to change it back.
Help!
Regards, Sam
13 years, 8 months
yum update error messages
by JD
Does anyone know why I am getting these error messages during yum update?
The update actually succeeds and the packages are updated.
Warning in file "/usr/share/applications/fedora-kid3.desktop": usage of
MIME type "x-directory/normal" is discouraged ("x-directory" is an old
media type that should be replaced with a modern equivalent)
Warning in file
"/usr/share/applications/gnome-nautilus-folder-handler.desktop": usage
of MIME type "x-directory/gnome-default-handler" is discouraged
("x-directory" is an old media type that should be replaced with a
modern equivalent)
Warning in file
"/usr/share/applications/gnome-nautilus-folder-handler.desktop": usage
of MIME type "x-directory/normal" is discouraged ("x-directory" is an
old media type that should be replaced with a modern equivalent)
Warning in file "/usr/share/applications/eina.desktop": usage of MIME
type "x-directory/normal" is discouraged ("x-directory" is an old media
type that should be replaced with a modern equivalent)
Error in file "/usr/share/applications/kde4/kfontview.desktop":
"fonts/package" is an invalid MIME type ("fonts" is an unregistered
media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop": "uri/mms"
is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop": "uri/pnm"
is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop":
"uri/rtspt" is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop":
"uri/rtspu" is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde/printers.desktop":
"print/manager" is an invalid MIME type ("print" is an unregistered
media type)
Warning in file "/usr/share/applications/fedora-kid3.desktop": usage of
MIME type "x-directory/normal" is discouraged ("x-directory" is an old
media type that should be replaced with a modern equivalent)
Warning in file
"/usr/share/applications/gnome-nautilus-folder-handler.desktop": usage
of MIME type "x-directory/gnome-default-handler" is discouraged
("x-directory" is an old media type that should be replaced with a
modern equivalent)
Warning in file
"/usr/share/applications/gnome-nautilus-folder-handler.desktop": usage
of MIME type "x-directory/normal" is discouraged ("x-directory" is an
old media type that should be replaced with a modern equivalent)
Warning in file "/usr/share/applications/eina.desktop": usage of MIME
type "x-directory/normal" is discouraged ("x-directory" is an old media
type that should be replaced with a modern equivalent)
Error in file "/usr/share/applications/kde4/kfontview.desktop":
"fonts/package" is an invalid MIME type ("fonts" is an unregistered
media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop": "uri/mms"
is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop": "uri/pnm"
is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop":
"uri/rtspt" is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde4/kmplayer.desktop":
"uri/rtspu" is an invalid MIME type ("uri" is an unregistered media type)
Error in file "/usr/share/applications/kde/printers.desktop":
"print/manager" is an invalid MIME type ("print" is an unregistered
media type)
13 years, 8 months