package-announce October 2009

package-announce@lists.fedoraproject.org

1 participants
865 discussions

[SECURITY] Fedora 11 Update: firefox-3.5.4-1.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 11 Version : 3.5.4 Release : 1.fc11 URL : http://www.mozilla.org/projects/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 26 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.4-1 - Updated to 3.5.4 * Mon Sep 7 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.3-1 - Updated to 3.5.3. * Thu Aug 6 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.2-3 - Fix for #437596 - Firefox needs to register proper name for session restore. * Mon Aug 3 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.2-2 - Updated to 3.5.2. * Fri Jul 24 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.1-3 - Adjust icons cache update according to template * Wed Jul 22 2009 Jan Horak <jhorak(a)redhat.com> - 3.5.1-2 - New icons fixed * Fri Jul 17 2009 Martin Stransky <stransky(a)redhat.com> - 3.5.1-1 - Updated to 3.5.1. * Tue Jul 7 2009 Jan Horak <jhorak(a)redhat.com> - 3.5-2 - Updated icon * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 3.5-1 - Firefox 3.5 final release * Tue May 26 2009 Martin Stransky <stransky(a)redhat.com> - 3.5-0.21 - fix for #502541 - Firefox version should depend on Xulrunner but does not -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update firefox' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 11 Update: galeon-2.0.7-17.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : galeon Product : Fedora 11 Version : 2.0.7 Release : 17.fc11 URL : http://galeon.sourceforge.net/ Summary : GNOME2 Web browser based on Mozilla Description : Galeon is a web browser built around Gecko (Mozilla's rendering engine) and Necko (Mozilla's networking engine). It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web. -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-17 - Rebuild against newer gecko * Fri Sep 25 2009 Denis Leroy <denis(a)poolshark.org> - 2.0.7-16 - Added patch from Yanko Kaneti (#525417) to fix crash on startup * Wed Sep 23 2009 Denis Leroy <denis(a)poolshark.org> - 2.0.7-15 - Added jsconsole patch - Changed default home location, Mandriva patch - Disable plugins wrap patch, causing spurious crashes - Made gecko libs Rs and BRs exact (#515640) * Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-14 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.0.7-13 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 2.0.7-12 - Rebuild against newer gecko * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.0.7-11 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update galeon' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 11 Update: epiphany-2.26.3-5.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : epiphany Product : Fedora 11 Version : 2.26.3 Release : 5.fc11 URL : http://www.gnome.org/projects/epiphany/ Summary : Web browser for GNOME Description : Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the Web content, instead of the browser application. Epiphany is extensible through a plugin system. Existing plugins can be found in the epiphany-extensions package. -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-5 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-4 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.3-3 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.3-2 - Rebuild against newer gecko * Wed Jul 1 2009 Matthias Clasen <mclasen(a)redhat.com> - 2.26.3-1 - Update to 2.26.3 - See http://download.gnome.org/sources/epiphany/2.26/epiphany-2.26.3.changes * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.2-2 - Rebuild against newer gecko * Mon Jun 1 2009 Matthias Clasen <mclasen(a)redhat.com> - 2.26.2-1 - Update to 2.26.2 - See http://download.gnome.org/sources/epiphany/2.26/epiphany-2.26.2.changes -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update epiphany' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-7.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : epiphany-extensions Product : Fedora 11 Version : 2.26.1 Release : 7.fc11 URL : http://www.gnome.org/projects/epiphany/extensions Summary : Extensions for Epiphany, the GNOME web browser Description : Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser. -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.1-7 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 2.26.1-6 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-5 - Rebuild against newer gecko * Fri Jul 17 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-4 - Rebuild against newer gecko * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 2.26.1-3 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update epiphany-extensions' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 11 Update: blam-1.8.5-15.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : blam Product : Fedora 11 Version : 1.8.5 Release : 15.fc11 URL : http://www.cmartin.tk/blam.html Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-15 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-14 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 1.8.5-13 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 1.8.5-12 - Rebuild against newer gecko * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 1.8.5-11 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 11 Update: chmsee-1.0.1-12.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : chmsee Product : Fedora 11 Version : 1.0.1 Release : 12.fc11 URL : http://code.google.com/p/chmsee Summary : A Gtk+2 CHM document viewer Description : A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. It is actively developed and maintained. The author of chmsee is Jungle Ji and several other great people. Hint * Unlike other chm viewers, chmsee extracts files from chm file, and then read and display them. The extracted files could be found in $HOME/.chmsee/bookshelf directory. You can clean those files at any time and there is a special config option for that. * The bookmark is related to each file so not all bookmarks will be loaded, only current file's. * Try to remove $HOME/.chmsee if you encounter any problem after an upgrade. -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-12 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-11 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon <caillon(a)redhat.com> - 1.0.1-10 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak <jhorak(a)redhat.com> - 1.0.1-9 - Rebuild against newer gecko * Tue Jul 14 2009 bbbush <bbbush.yuan(a)gmail.com> - 1.0.1-8 - revert to 1.0.1 as latest version crash on xulrunner-1.9.1.2 * Sun Jul 12 2009 bbbush <bbbush.yuan(a)gmail.com> - 1.0.6-1 - update to 1.0.6 - update project location. Chmsee moved to google code since 2009-01-05, co-maintained by Li Daobing and Jungle Ji - update build steps to use CMake - Chmsee 1.0.3 was released on 2009-01-10, added "copy page location" in context menu, updated translation - Chmsee 1.0.4 was released on 2009-03-14, added "drag and drop" support, dropped cs2w - Chmsee 1.0.5 was released on 2009-05-17, added fullscreen support, switched to CMake, supported 6 more new languages - Chmsee 1.0.6 was released on 2009-07-12, added index support, supported 8 more new languages * Tue Jun 30 2009 Christopher Aillon <caillon(a)redhat.com> - 1.0.1-7 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update chmsee' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 10 Update: fedora-security-guide-en-US-1.0-19.fc10
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10877 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : fedora-security-guide-en-US Product : Fedora 10 Version : 1.0 Release : 19.fc10 URL : http://docs.fedoraproject.org Summary : A Guide to Securing Fedora Linux Description : The Linux Security Guide is designed to assist users of Linux in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. The Linux Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods. -------------------------------------------------------------------------------- Update Information: Updated license to CC-BY-SA. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fedora-security-guide-en-US' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 10 Update: monitor-edid-2.4-1.fc10
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10624 2009-10-21 00:09:26 -------------------------------------------------------------------------------- Name : monitor-edid Product : Fedora 10 Version : 2.4 Release : 1.fc10 URL : http://wiki.mandriva.com/en/Tools/monitor-edid Summary : Tool for probing and parsing monitor EDID Description : Monitor-edid is a tool for probing and parsing Extended display identification data (EDID) from monitors. For more information about EDID, see http://en.wikipedia.org/wiki/EDID -------------------------------------------------------------------------------- Update Information: Upstream Changelog Version 2.4 - monitor-parse-edid: o ignore the Manufacturer Specified Range Timing descriptor if the first detailed timing descriptor appears to violate it (this probably means that the descriptor is actually something else or in a different format; this fixes Lenovo W500 detection, reported by Udo Rader) Version 2.3 - monitor-get-edid-using- vbe: o update x86emu from xserver git (fixes issues at least with newish NVIDIA cards) o check if the port supports DDC before trying to read EDID data (this should prevent problems when probing nonexistent ports on old cards) - monitor-edid, monitor-get-edid: o probe ports 0-2 by default instead of just 0-1 (many NVIDIA cards seem to be using port 2 and the changes in monitor- get-edid-using-vbe should make it safe for old problematic NVIDIA cards as well) Version 2.2 - monitor-edid, monitor-get-edid: o support getting EDID from kernel DRM when kernel mode-setting is enabled (Anssi Hannula) - monitor-probe- using-X: o use resolution from LVDS initial mode when X reports that it is exact, making it work with nouveau driver (Anssi Hannula) Version 2.1 - monitor-parse-edid: o compute and display the "dpi" of the preferred modelines o handle parsing of EDIDs found in "xrandr --prop" or Xorg.log - monitor-get-edid-using-vbe: o fix checking the current vt o instead of checking vt >= 7 to know if X is running, check wether $DISPLAY is set -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 17 2009 Remi Collet <Fedora(a)famillecollet.com> 2.4-1 - new version -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update monitor-edid' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 10 Update: audacious-plugins-1.5.1-15.fc10
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10574 2009-10-21 00:07:51 -------------------------------------------------------------------------------- Name : audacious-plugins Product : Fedora 10 Version : 1.5.1 Release : 15.fc10 URL : http://audacious-media-player.org/ Summary : Plugins for the Audacious media player Description : Audacious is a media player that currently uses a skinned user interface based on Winamp 2.x skins. It is based on ("forked off") BMP. This package provides essential plugins for audio input, audio output and visualization. -------------------------------------------------------------------------------- Update Information: * Fix sndfile plugin playback. * Patch "pulse_audio" output plugin to not get confused by volume level changes passed in via callback. Volume level now doesn't change when starting the next track. * Patch "pulse_audio" output plugin to not suffer from precision-loss when saving the volume level in Audacious config file. * Patch alsa-ng plugin with some buffer prefilling to fight underruns. * Merge minor changes from 2.2 alpha1 alsa-ng plugin. [Please note that if you use external mixers / volume controls to alter the volume level, Audacious older than 2.2 (which is still being developed) does not reflect that with its own volume slider. So, if you switch between multiple volume controls often, you can experience big jumps in volume level going up/down.] -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 28 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-15 - Remove decode_thread from sndfile plugin to fix playback. * Wed Oct 21 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-14 - Set buffer_time_min in underruns patch. Depend on default buffer size. * Wed Oct 21 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-13 - Patch pulseaudio plugin to not suffer from precision loss when calculating the volume level to save. * Mon Oct 19 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-12 - Patch pulseaudio plugin to not get confused by volume values passed in via callback. * Sat Sep 19 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-11 - Patch alsa-ng plugin with some buffer prefilling to fight underruns. - Merge minor changes from 2.2 alpha1 alsa-ng plugin. * Thu Jul 2 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-10 - Prevent alsalib mixer crash if mixer isn't ready. * Mon Jun 29 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-9 - Use old "ALSA" plugin id for config file. - Keep old mixer level even if mixer isn't ready. * Mon Jun 29 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-8 - Replace old ALSA output plugin and related patches with the "alsa-ng" code from Audacious 2.1 development. This is supposed to get rid of old cruft and mutex-locking overhead that cause performance regression in 1.5.1-6. * Fri Jun 5 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-7 - Remove unapplied patches and verify that they have been merged. - Multiple different licenses are used for the individual plugins. - Move amidi-plug directory to amidi subpackage. * Thu Jun 4 2009 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.1-6 - Apply ALSA driver patches by Hans de Goede (#499942). - Minor spec updates. - Update scriptlets in accordance with guidelines. - Build with libsndfile plugin for advanced formats in WAV and patch it for pause and seek (also fixes #501007). * Wed May 6 2009 Ralf Ertzinger <ralf(a)skytale.net> 1.5.1-5 - Fix possible crash on neon buffer underrun (BZ#496413) * Fri May 1 2009 Ralf Ertzinger <ralf(a)skytale.net> 1.5.1-4 - Accept .oga files (BZ#479120) - Look for timitidy.cfg in /etc (BZ#450933) - Fix missing symbols in amidi-plugin (BZ#478557) - Include CD-audio plugin (BZ#442921) * Mon Feb 23 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update audacious-plugins' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 11 Update: perl-Curses-UI-0.9607-2.fc11
by updates＠fedoraproject.org 29 Oct '09

29 Oct '09

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9870 2009-09-24 04:15:03 -------------------------------------------------------------------------------- Name : perl-Curses-UI Product : Fedora 11 Version : 0.9607 Release : 2.fc11 URL : http://search.cpan.org/dist/Curses-UI/ Summary : Curses based OO user interface framework Description : Curses::UI is an object-oriented user interface framework for Perl. -------------------------------------------------------------------------------- Update Information: An object-oriented user interface framework for Perl. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #516271 - Review Request: perl-Curses-UI - Curses based OO user interface framework https://bugzilla.redhat.com/show_bug.cgi?id=516271 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl-Curses-UI' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
...
87
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce October 2009