Fedora Core 6 Update: logrotate-3.7.4-14.fc6
by Tomáš Smetana
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-558
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 6
Name : logrotate
Version : 3.7.4
Release : 14.fc6
Summary : Rotates, compresses, removes and mails system log files
Description :
The logrotate utility is designed to simplify the administration of
log files on a system which generates a lot of log files. Logrotate
allows for the automatic rotation compression, removal and mailing of
log files. Logrotate can be set to handle a log file daily, weekly,
monthly or when the log file gets to a certain size. Normally,
logrotate runs as a daily cron job.
Install the logrotate package if you need a utility to deal with the
log files on your system.
---------------------------------------------------------------------
* Thu May 31 2007 Tomas Smetana <tsmetana(a)redhat.com> 3.7.4-14
- fix ignoring pre/postrotate script arguments (related #241766)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
fdf1c2f4f02eafadda01165f8755df372dd6f942 SRPMS/logrotate-3.7.4-14.fc6.src.rpm
fdf1c2f4f02eafadda01165f8755df372dd6f942 noarch/logrotate-3.7.4-14.fc6.src.rpm
f9963c82bad708b940316f1f8003272feaaef7ff ppc/logrotate-3.7.4-14.fc6.ppc.rpm
47c574309ea9c4f8a02ee8386016d4d822bcea37 ppc/debug/logrotate-debuginfo-3.7.4-14.fc6.ppc.rpm
c61003ddb03d30ba7ceb7766bb92a1b2d042e527 x86_64/logrotate-3.7.4-14.fc6.x86_64.rpm
c5bff1661fcc378e3eaef45d03e04ce3b41a5c53 x86_64/debug/logrotate-debuginfo-3.7.4-14.fc6.x86_64.rpm
db8b88ed962a273199ad5564dabba95b0df62589 i386/logrotate-3.7.4-14.fc6.i386.rpm
fd741372ee7edcbddb0f0273d1541896cf363745 i386/debug/logrotate-debuginfo-3.7.4-14.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: lha-1.14i-20
by Tomáš Smetana
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-557
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : lha
Version : 1.14i
Release : 20
Summary : An archiving and compression utility for LHarc format archives.
Description :
LHA is an archiving and compression utility for LHarc format archives.
LHA is mostly used in the DOS world, but can be used under Linux to
extract DOS files from LHA archives.
Install the lha package if you need to extract DOS files from LHA archives.
---------------------------------------------------------------------
* Thu May 31 2007 Tomas Smetana <tsmetana(a)redhat.com> - 1.14i-20
- fix #220596 CVE-2006-4335/7/8 multiple vulnerabilities in lha
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
f77c3f3784791ebef153250183a94e7435c3910a SRPMS/lha-1.14i-20.src.rpm
f77c3f3784791ebef153250183a94e7435c3910a noarch/lha-1.14i-20.src.rpm
60f14246eab34d230adc929a7d405a86b05b82fb ppc/lha-1.14i-20.ppc.rpm
df778e5163b234a85ec836be5f5f39a70fa5850c ppc/debug/lha-debuginfo-1.14i-20.ppc.rpm
74e9229fd6cef8687e50d0c5eeb1b9dbaae0bc40 x86_64/debug/lha-debuginfo-1.14i-20.x86_64.rpm
28b18e042aaeee1d5e4c9625e0bb8b6339da35ff x86_64/lha-1.14i-20.x86_64.rpm
79d0dbcac14f359d693300c8d417a8c6162aa214 i386/debug/lha-debuginfo-1.14i-20.i386.rpm
2c067e9c2f6e150259bd40c25b954399fc08307f i386/lha-1.14i-20.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
Fedora Core 6 Update: elinks-0.11.1-5.2
by Karel Zak
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-556
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 6
Name : elinks
Version : 0.11.1
Release : 5.2
Summary : A text-mode Web browser.
Description :
Links is a text-based Web browser. Links does not display any images,
but it does support frames, tables and most other HTML tags. Links'
advantage over graphical browsers is its speed--Links starts and exits
quickly and swiftly displays Web pages.
---------------------------------------------------------------------
* Thu May 31 2007 Karel Zak <kzak(a)redhat.com> 0.11.1-5.2
- fix #235411: CVE-2007-2027 elinks tries to load .po files from a non-absolute path
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
6104f49aebe4525f8090cb16cb6e14bd61e8ecdd SRPMS/elinks-0.11.1-5.2.src.rpm
6104f49aebe4525f8090cb16cb6e14bd61e8ecdd noarch/elinks-0.11.1-5.2.src.rpm
585d68236c44ba7f76cc0ef684d743abeaaa084c ppc/debug/elinks-debuginfo-0.11.1-5.2.ppc.rpm
6dfe83fd1a9c8211426f6d4067dee0d8aae22af8 ppc/elinks-0.11.1-5.2.ppc.rpm
8958098a182088ca02fee40bd4ef3b6f24347d03 x86_64/debug/elinks-debuginfo-0.11.1-5.2.x86_64.rpm
5d35d130ce10ccb855ec59e1ed5693e9403b2342 x86_64/elinks-0.11.1-5.2.x86_64.rpm
ee0cc27f7a97ca8c57ba6dfde359d6c2a9c68fe1 i386/debug/elinks-debuginfo-0.11.1-5.2.i386.rpm
f191b18fe2e01ad36b7e152481ec2b1437293cfa i386/elinks-0.11.1-5.2.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.12-1.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-554
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : firefox
Version : 1.5.0.12
Release : 1.fc5
Summary : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
---------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security bugs are
now available for Fedora Core 5.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
Several flaws were found in the way Firefox processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause Firefox to crash or
potentially execute arbitrary code as the user running
Firefox. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way Firefox handled certain FTP PASV
commands. A malicious FTP server could use this flaw to
perform a rudimentary port-scan of machines behind a user's
firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way
Firefox handled certain form and cookie data. A malicious
web site that is able to set arbitrary form and cookie data
could prevent Firefox from functioning properly.
(CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way Firefox handled the
addEventListener JavaScript method. A malicious web site
could use this method to access or modify sensitive data
from another web site. (CVE-2007-2870)
A flaw was found in the way Firefox displayed certain web
content. A malicious web page could generate content that
would overlay user interface elements such as the hostname
and security indicators, tricking users into thinking they
are visiting a different site. (CVE-2007-2871)
Users of Firefox are advised to upgrade to these erratum
packages, which contain Firefox version 1.5.0.12 that
corrects these issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1
- Update to 1.5.0.12
* Thu Feb 22 2007 Martin Stransky <stransky(a)redhat.com> - 1.5.0.10-1
- Update to 1.5.0.10
* Wed Dec 20 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.9-1
- Update to 1.5.0.9
* Tue Nov 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.8-1
- Update to 1.5.0.8
- Fix up a few items in the download manager
- Use the bullet character for password fields.
- Add pango printing patch from Behdad.
* Wed Sep 13 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-1
- Update to 1.5.0.7
- Bring in pango patches from rawhide to fix MathML and cursor positioning
* Tue Aug 8 2006 Jesse Keating <jkeating(a)redhat.com> - 1.5.0.6-2
- Use dist tag
- rebuild
* Thu Aug 3 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.6-1.1.fc5
- Update to 1.5.0.6
* Thu Jul 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-1.1.fc5
- Update to 1.5.0.5
* Wed Jun 14 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-1.2.fc5
- Force "gmake -j1" on ppc ppc64 s390 s390x
* Mon Jun 12 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-1.1.fc5
- Firefox 1.5.0.4
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
a83e5361e463ea25f96f4b084e670fe337a3ca97 SRPMS/firefox-1.5.0.12-1.fc5.src.rpm
a83e5361e463ea25f96f4b084e670fe337a3ca97 noarch/firefox-1.5.0.12-1.fc5.src.rpm
7b9fe30496f3867231c09d3762661dcb654ba7aa ppc/debug/firefox-debuginfo-1.5.0.12-1.fc5.ppc.rpm
7c16f90f7496ef7f1e8d25db6f8c34642bb7e950 ppc/firefox-1.5.0.12-1.fc5.ppc.rpm
b859e8dfd781d2cbe9c291b9ab884b851aadeae3 x86_64/debug/firefox-debuginfo-1.5.0.12-1.fc5.x86_64.rpm
dca05f5c9941dc93cc9d269f5101e6608f71cca7 x86_64/firefox-1.5.0.12-1.fc5.x86_64.rpm
39ca095c35a32b1a9f312945f28b53b8e87cd959 i386/firefox-1.5.0.12-1.fc5.i386.rpm
ad1190d8d8b26817e343073f834d1ba5dd8b21f7 i386/debug/firefox-debuginfo-1.5.0.12-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: epiphany-2.14.3-6.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-552
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : epiphany
Version : 2.14.3
Release : 6.fc5
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine
---------------------------------------------------------------------
Update Information:
Updated seamonkey packages that fix several security bugs
are now available for Fedora Core 5.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
SeaMonkey is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.
Several flaws were found in the way SeaMonkey processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause SeaMonkey to crash or
potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way SeaMonkey handled certain FTP
PASV commands. A malicious FTP server could use this flaw to
perform a rudimentary port-scan of machines behind a user's
firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way
SeaMonkey handled certain form and cookie data. A malicious
web site that is able to set arbitrary form and cookie data
could prevent SeaMonkey from functioning properly.
(CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way SeaMonkey processed certain APOP
authentication requests. By sending certain responses when
SeaMonkey attempted to authenticate against an APOP server,
a remote attacker could potentially acquire certain portions
of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way SeaMonkey handled the
addEventListener JavaScript method. A malicious web site
could use this method to access or modify sensitive data
from another web site. (CVE-2007-2870)
A flaw was found in the way SeaMonkey displayed certain web
content. A malicious web page could generate content that
would overlay user interface elements such as the hostname
and security indicators, tricking users into thinking they
are visiting a different site. (CVE-2007-2871)
Users of SeaMonkey are advised to upgrade to these erratum
packages, which contain SeaMonkey version 1.0.9 that
corrects these issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 2.14.3-6
- Rebuild
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 2.14.3-5
- Rebuild against newer gecko
* Fri Feb 16 2007 Martin Stransky <stransky(a)redhat.com> - 2.14.3-4
- Rebuild against seamonkey
* Fri Dec 22 2006 Martin Stransky <stransky(a)redhat.com> - 2.14.3-3
- Rebuild against seamonkey
* Mon Nov 13 2006 Martin Stransky <stransky(a)redhat.com> - 2.14.3-2
- Rebuild against seamonkey
* Wed Aug 2 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.14.3-1.fc5
- Update to 2.14.3
* Mon May 29 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.14.2.1-1.fc5.1
- Update to 2.14.2.1
* Sun May 28 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.14.2-1.fc5.1
- Update to 2.14.2
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
94e424f06c19e031e3109a8eb60e4b06a21150e1 SRPMS/epiphany-2.14.3-6.fc5.src.rpm
94e424f06c19e031e3109a8eb60e4b06a21150e1 noarch/epiphany-2.14.3-6.fc5.src.rpm
cb00b48656ebce8c804da1e435a15a2d0d07b6c8 ppc/epiphany-devel-2.14.3-6.fc5.ppc.rpm
3be5508ee511b4d3a76db1cb3cb9c65906fb178d ppc/debug/epiphany-debuginfo-2.14.3-6.fc5.ppc.rpm
8f746eb98b829762540f84bfde2599673c78f244 ppc/epiphany-2.14.3-6.fc5.ppc.rpm
748204683e71dd180486e7a2e66fd2b780739aeb x86_64/epiphany-2.14.3-6.fc5.x86_64.rpm
b5addc6b7fbc5cd7db3ffd3bc8eb2ce4efdc4ca1 x86_64/debug/epiphany-debuginfo-2.14.3-6.fc5.x86_64.rpm
fc517c37d0e8819689d09f24bc04e9e61c5fd144 x86_64/epiphany-devel-2.14.3-6.fc5.x86_64.rpm
e267e1f20bcbbece8041628eb3ac303ec4b64215 i386/epiphany-devel-2.14.3-6.fc5.i386.rpm
0f5b95ac2b08cc945b6efae6b815fdd2167bef6e i386/epiphany-2.14.3-6.fc5.i386.rpm
c5479884c86dc5cbf5e4b55839f4b24a20714dda i386/debug/epiphany-debuginfo-2.14.3-6.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: yelp-2.14.3-5.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-552
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : yelp
Version : 2.14.3
Release : 5.fc5
Summary : A system documentation reader from the Gnome project.
Description :
Yelp is the Gnome 2 help/documentation browser. It is designed
to help you browse all the documentation on your system in
one central tool.
---------------------------------------------------------------------
Update Information:
Updated seamonkey packages that fix several security bugs
are now available for Fedora Core 5.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
SeaMonkey is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.
Several flaws were found in the way SeaMonkey processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause SeaMonkey to crash or
potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way SeaMonkey handled certain FTP
PASV commands. A malicious FTP server could use this flaw to
perform a rudimentary port-scan of machines behind a user's
firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way
SeaMonkey handled certain form and cookie data. A malicious
web site that is able to set arbitrary form and cookie data
could prevent SeaMonkey from functioning properly.
(CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way SeaMonkey processed certain APOP
authentication requests. By sending certain responses when
SeaMonkey attempted to authenticate against an APOP server,
a remote attacker could potentially acquire certain portions
of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way SeaMonkey handled the
addEventListener JavaScript method. A malicious web site
could use this method to access or modify sensitive data
from another web site. (CVE-2007-2870)
A flaw was found in the way SeaMonkey displayed certain web
content. A malicious web page could generate content that
would overlay user interface elements such as the hostname
and security indicators, tricking users into thinking they
are visiting a different site. (CVE-2007-2871)
Users of SeaMonkey are advised to upgrade to these erratum
packages, which contain SeaMonkey version 1.0.9 that
corrects these issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 2.14.3-5
- Rebuild against newer gecko
* Fri Feb 16 2007 Martin Stransky <stransky(a)redhat.com> - 2.14.3-4
- Rebuild against seamonkey
* Fri Dec 22 2006 Martin Stransky <stransky(a)redhat.com> - 2.14.3-3
- Rebuild against seamonkey
* Tue Nov 14 2006 Martin Stransky <stransky(a)redhat.com> - 2.14.3-2
- Rebuild against seamonkey
* Wed Aug 2 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.14.3-1.fc5
- Update to 2.14.3
* Mon May 29 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.14.2-1
- Update to 2.14.2
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
659f3e85741e0096c3418e70783499ebf613bd4a SRPMS/yelp-2.14.3-5.fc5.src.rpm
659f3e85741e0096c3418e70783499ebf613bd4a noarch/yelp-2.14.3-5.fc5.src.rpm
7806f1e8309e66d8c8ecf1582290cb39f3aa0df0 ppc/debug/yelp-debuginfo-2.14.3-5.fc5.ppc.rpm
55a38a9eeea586e772c20ba2e43b93b320d09701 ppc/yelp-2.14.3-5.fc5.ppc.rpm
c87fa850ed060a2d85ecee53e6bdf103b0224a13 x86_64/debug/yelp-debuginfo-2.14.3-5.fc5.x86_64.rpm
8b7595fbe8f268e375356db470fc49c1e839605a x86_64/yelp-2.14.3-5.fc5.x86_64.rpm
9cc69fd5cdbe93cfdea12e59df097d26467aaffe i386/yelp-2.14.3-5.fc5.i386.rpm
28775ca8c38fb9741a8efe5c94c18b4ae1d3dc07 i386/debug/yelp-debuginfo-2.14.3-5.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: devhelp-0.11-7.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-552
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : devhelp
Version : 0.11
Release : 7.fc5
Summary : API document browser
Description :
An API document browser for GNOME 2.
---------------------------------------------------------------------
Update Information:
Updated seamonkey packages that fix several security bugs
are now available for Fedora Core 5.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
SeaMonkey is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.
Several flaws were found in the way SeaMonkey processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause SeaMonkey to crash or
potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way SeaMonkey handled certain FTP
PASV commands. A malicious FTP server could use this flaw to
perform a rudimentary port-scan of machines behind a user's
firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way
SeaMonkey handled certain form and cookie data. A malicious
web site that is able to set arbitrary form and cookie data
could prevent SeaMonkey from functioning properly.
(CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way SeaMonkey processed certain APOP
authentication requests. By sending certain responses when
SeaMonkey attempted to authenticate against an APOP server,
a remote attacker could potentially acquire certain portions
of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way SeaMonkey handled the
addEventListener JavaScript method. A malicious web site
could use this method to access or modify sensitive data
from another web site. (CVE-2007-2870)
A flaw was found in the way SeaMonkey displayed certain web
content. A malicious web page could generate content that
would overlay user interface elements such as the hostname
and security indicators, tricking users into thinking they
are visiting a different site. (CVE-2007-2871)
Users of SeaMonkey are advised to upgrade to these erratum
packages, which contain SeaMonkey version 1.0.9 that
corrects these issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 0.11-7
- Rebuild against newer gecko
* Fri Feb 16 2007 Martin Stransky <stransky(a)redhat.com> - 0.11-6
- Rebuild against seamonkey
* Fri Dec 22 2006 Martin Stransky <stransky(a)redhat.com> - 0.11-5
- Rebuild against seamonkey
* Mon Nov 13 2006 Martin Stransky <stransky(a)redhat.com> - 0.11-4
- Rebuild against seamonkey
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
f58d165919787c95a4d1c29508a3b077892acdca SRPMS/devhelp-0.11-7.fc5.src.rpm
f58d165919787c95a4d1c29508a3b077892acdca noarch/devhelp-0.11-7.fc5.src.rpm
e6cb0149b4755d5c70e7ce0a9f4d4779145818b2 ppc/devhelp-0.11-7.fc5.ppc.rpm
06df40639fdf5c32993b6d5dd7b5e2445d341eed ppc/debug/devhelp-debuginfo-0.11-7.fc5.ppc.rpm
ff2fdf05eab52a1512521fce2297c282a8399d25 ppc/devhelp-devel-0.11-7.fc5.ppc.rpm
ba0c3b7c0be5c75bbe609223e20145ecd5350c52 x86_64/devhelp-0.11-7.fc5.x86_64.rpm
40398e866c19be545c9d6152ad672871067d625c x86_64/devhelp-devel-0.11-7.fc5.x86_64.rpm
84e8ecd0fab8d411860474b33b7579001cf262d9 x86_64/debug/devhelp-debuginfo-0.11-7.fc5.x86_64.rpm
7fc0547752d8ee962951089c3b0b17bb9992e2a5 i386/devhelp-0.11-7.fc5.i386.rpm
ee139d6591e82e4a9653e2d8c07d83c6108aa793 i386/devhelp-devel-0.11-7.fc5.i386.rpm
1db82ae33c625d53b1869dae24f9d35acf8120a7 i386/debug/devhelp-debuginfo-0.11-7.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: seamonkey-1.0.9-1.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-552
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : seamonkey
Version : 1.0.9
Release : 1.fc5
Summary : Web browser and mail reader
Description :
SeaMonkey (former Mozilla) is an open-source web browser, designed for standards
compliance, performance and portability.
---------------------------------------------------------------------
Update Information:
Updated seamonkey packages that fix several security bugs
are now available for Fedora Core 5.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
SeaMonkey is an open source Web browser, advanced email and
newsgroup client, IRC chat client, and HTML editor.
Several flaws were found in the way SeaMonkey processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause SeaMonkey to crash or
potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way SeaMonkey handled certain FTP
PASV commands. A malicious FTP server could use this flaw to
perform a rudimentary port-scan of machines behind a user's
firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way
SeaMonkey handled certain form and cookie data. A malicious
web site that is able to set arbitrary form and cookie data
could prevent SeaMonkey from functioning properly.
(CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way SeaMonkey processed certain APOP
authentication requests. By sending certain responses when
SeaMonkey attempted to authenticate against an APOP server,
a remote attacker could potentially acquire certain portions
of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way SeaMonkey handled the
addEventListener JavaScript method. A malicious web site
could use this method to access or modify sensitive data
from another web site. (CVE-2007-2870)
A flaw was found in the way SeaMonkey displayed certain web
content. A malicious web page could generate content that
would overlay user interface elements such as the hostname
and security indicators, tricking users into thinking they
are visiting a different site. (CVE-2007-2871)
Users of SeaMonkey are advised to upgrade to these erratum
packages, which contain SeaMonkey version 1.0.9 that
corrects these issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.0.9-1
- Update to 1.0.9
* Thu Feb 15 2007 Martin Stransky <stransky(a)redhat.com> 1.0.8-0.5.1
- Update to 1.0.8
* Thu Jan 18 2007 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.6.0.1
- created a link in /usr/bin/seamonkey
- fixed mozilla-rebuild-databases.pl script, was called in %post
with an incorrect path
- fixed mozilla-config script
- added a configuration from former extras seamonkey (#223848)
* Thu Jan 4 2007 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.6
- Release bump
* Thu Dec 21 2006 Martin Stransky <stransky(a)redhat.com> 1.0.7-0.1
- Update to 1.0.7
* Tue Dec 19 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.3
- added dependencies on nspr-devel,nss-devel to seamonkey-devel package
* Thu Dec 14 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.2.fc6
- added ppc64 to arches
* Fri Nov 10 2006 Martin Stransky <stransky(a)redhat.com> 1.0.6-0.1.fc6
- moved to core
- replaced nspr/nss with packages from core
* Sun Nov 5 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.6-0.1.el4
- Update to 1.0.6 (RC)
* Mon Sep 11 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.5-0.1.el4
- Update to 1.0.5
* Wed Jul 26 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.3-0.el4.1
- Update to 1.0.3
* Wed Jun 28 2006 Warren Togami <wtogami(a)redhat.com> 1.0.2-0.1.0.EL4
- Prevent obsolete script from replacing mozilla-xremote-client (#192639)
- 1.0.2 security fixes
- remove unused patches
* Mon May 22 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.3.EL4
- Fix the -devel packages and pkg-config files
* Fri May 19 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.2.EL4
- Import some fixes from the RHEL3 package
* Fri May 12 2006 Christopher Aillon <caillon(a)redhat.com> 1.0.1-0.1.1.EL4
- Initial Seamonkey RPM
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
d097d329fcc14226207e03feb051fd178654c518 SRPMS/seamonkey-1.0.9-1.fc5.src.rpm
d097d329fcc14226207e03feb051fd178654c518 noarch/seamonkey-1.0.9-1.fc5.src.rpm
af3c13a62a5c719f2ef9e3a571ee73fd9dfcf84f ppc/seamonkey-1.0.9-1.fc5.ppc.rpm
ecd0cc46cab09c1b0deb64a5822a39ae37c9fc25 ppc/debug/seamonkey-debuginfo-1.0.9-1.fc5.ppc.rpm
5b0f2481d2f21ca022642d02b311fce60a73e8f9 ppc/seamonkey-js-debugger-1.0.9-1.fc5.ppc.rpm
f65231af0064b2b110ffbe8b97c631189f6be467 ppc/seamonkey-mail-1.0.9-1.fc5.ppc.rpm
2e38ac784a687d95ca55ad21f0a38e8b70f61add ppc/seamonkey-dom-inspector-1.0.9-1.fc5.ppc.rpm
c1a3f8acfd8f153096816d1fbe38a1d14d72e81d ppc/seamonkey-devel-1.0.9-1.fc5.ppc.rpm
547fe1520b3759f449472963b8edbc9e8bafb948 ppc/seamonkey-chat-1.0.9-1.fc5.ppc.rpm
99c14431b09e82a17d10547c7e20fa89f79f64be x86_64/seamonkey-dom-inspector-1.0.9-1.fc5.x86_64.rpm
34866fb6795fca53e30344457bdbb2088fcb2587 x86_64/seamonkey-devel-1.0.9-1.fc5.x86_64.rpm
e608060c3863ce2f2bf166a8e5ee1908bb2db6b7 x86_64/seamonkey-js-debugger-1.0.9-1.fc5.x86_64.rpm
9d41cdfb0694dd6fa5c13aa8cbc8cba20f411478 x86_64/seamonkey-1.0.9-1.fc5.x86_64.rpm
ee27045e12188268010b7d5f7738b6e3fd2c439b x86_64/seamonkey-chat-1.0.9-1.fc5.x86_64.rpm
fd58a33d9ae701661fa499e157bbfbc5e74c6a4e x86_64/seamonkey-mail-1.0.9-1.fc5.x86_64.rpm
c2c281e8818145761d9dc90fb1cdbd099499e016 x86_64/debug/seamonkey-debuginfo-1.0.9-1.fc5.x86_64.rpm
026cfd55c1a74b8172df78af632a67e77e8a1ed3 i386/seamonkey-devel-1.0.9-1.fc5.i386.rpm
1bf11eaae35d4e525bded75d4499beeaae67cfd1 i386/seamonkey-dom-inspector-1.0.9-1.fc5.i386.rpm
fd557a8d93ef82c3ec079eba84a898264c8890c3 i386/debug/seamonkey-debuginfo-1.0.9-1.fc5.i386.rpm
64f814f2239657dbd777fe1e7e6cdc084e299844 i386/seamonkey-js-debugger-1.0.9-1.fc5.i386.rpm
aa8011ceba48b69177d57459037a965d6c16d9fb i386/seamonkey-mail-1.0.9-1.fc5.i386.rpm
e61f1037c452166539953ab4109547a3f689a233 i386/seamonkey-1.0.9-1.fc5.i386.rpm
143488a2691b79878ad25250a0314e7377875f03 i386/seamonkey-chat-1.0.9-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-551
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : thunderbird
Version : 1.5.0.12
Release : 1.fc5
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
---------------------------------------------------------------------
Update Information:
Updated thunderbird packages that fix several security bugs
are now available for Fedora Core.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
Mozilla Thunderbird is a standalone mail and newsgroup client.
Several flaws were found in the way Thunderbird processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause Thunderbird to crash
or potentially execute arbitrary code as the user running
Thunderbird. (CVE-2007-2867, CVE-2007-2868)
Several denial of service flaws were found in the way
Thunderbird handled certain form and cookie data. A
malicious web site that is able to set arbitrary form and
cookie data could prevent Thunderbird from functioning
properly. (CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way Thunderbird processed certain
APOP authentication requests. By sending certain responses
when Thunderbird attempted to authenticate against an APOP
server, a remote attacker could potentially acquire certain
portions of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way Thunderbird displayed certain
web content. A malicious web page could generate content
which could overlay user interface elements such as the
hostname and security indicators, tricking users into
thinking they are visiting a different site. (CVE-2007-2871)
Users of Thunderbird are advised to apply this update, which
contains Thunderbird version 1.5.0.12 that corrects these
issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1
- Update to 1.5.0.12
* Thu Mar 1 2007 Martin Stransky <stransky(a)redhat.com> 1.5.0.10-1
- Update to 1.5.0.10
* Tue Dec 19 2006 Matthias Clasen <mclasen(a)redhat.com> 1.5.0.9-2
- Add a Requires: launchmail (#219884)
* Tue Dec 19 2006 Christopher Aillon <caillon(a)redhat.com> 1.5.0.9-1
- Update to 1.5.0.9
- Take firefox's pango fixes
- Don't offer to import...nothing.
* Tue Nov 7 2006 Christopher Aillon <caillon(a)redhat.com> 1.5.0.8-1
- Update to 1.5.0.8
- Allow choosing of download directory
- Take the user to the correct directory from the Download Manager.
- Patch to add support for printing via pango from Behdad.
* Sun Oct 8 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-4
- Default to use of system colors
* Wed Oct 4 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-3
- Bring the invisible character to parity with GTK+
* Wed Sep 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-2
- Fix crash when changing gtk key theme
- Prevent UI freezes while changing GNOME theme
- Remove verbiage about pango; no longer required by upstream.
* Wed Sep 13 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.7-1
- Update to 1.5.0.7
* Thu Sep 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-8
- Shuffle order of the install phase around
* Thu Sep 7 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-7
- Let there be art for Alt+Tab again
- s/tbdir/mozappdir/g
* Wed Sep 6 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-6
- Fix for cursor position in editor widgets by tagoh and behdad (#198759)
* Tue Sep 5 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-5
- Update nopangoxft.patch
- Fix rendering of MathML thanks to Behdad Esfahbod.
- Update start page text to reflect the MathML fixes.
- Enable pango by default on all locales
- Build using -rpath
- Re-enable GCC visibility
* Thu Aug 3 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.5-4
- Fix a build failure in mailnews mime code.
* Tue Aug 1 2006 Matthias Clasen <mclasen(a)redhat.com> - 1.5.0.5-3
- Rebuild
* Thu Jul 27 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.5-2
- Update to 1.5.0.5
* Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 1.5.0.4-2.1
- rebuild
* Mon Jun 12 2006 Kai Engert <kengert(a)redhat.com> - 1.5.0.4-2
- Update to 1.5.0.4
- Fix desktop-file-utils requires
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
9d6bcf40d81d9d0f281ff9e934ccde1636a82ad2 SRPMS/thunderbird-1.5.0.12-1.fc5.src.rpm
9d6bcf40d81d9d0f281ff9e934ccde1636a82ad2 noarch/thunderbird-1.5.0.12-1.fc5.src.rpm
ae8c17a9b856514272d3ad2c55a329717e9cb72b ppc/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.ppc.rpm
005323944a0e7ff4a66361b59746228ab5f5a161 ppc/thunderbird-1.5.0.12-1.fc5.ppc.rpm
c29fb2dff816698d248fe2138cd4455bb9c1cb85 x86_64/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.x86_64.rpm
3a1694d8866f0a4ddf6c06eec6b528f4e4dde4b9 x86_64/thunderbird-1.5.0.12-1.fc5.x86_64.rpm
8bb7e372c859690a4f8ca6a4f8944ee3d20d5c96 i386/debug/thunderbird-debuginfo-1.5.0.12-1.fc5.i386.rpm
d1baff4693caacf1896eebf6c06551a58293a886 i386/thunderbird-1.5.0.12-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months
[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6
by Christopher Aillon
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-550
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 6
Name : thunderbird
Version : 1.5.0.12
Release : 1.fc6
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
---------------------------------------------------------------------
Update Information:
Updated thunderbird packages that fix several security bugs
are now available for Fedora Core.
This update has been rated as having critical security
impact by the Fedora Security Response Team.
Mozilla Thunderbird is a standalone mail and newsgroup client.
Several flaws were found in the way Thunderbird processed
certain malformed JavaScript code. A web page containing
malicious JavaScript code could cause Thunderbird to crash
or potentially execute arbitrary code as the user running
Thunderbird. (CVE-2007-2867, CVE-2007-2868)
Several denial of service flaws were found in the way
Thunderbird handled certain form and cookie data. A
malicious web site that is able to set arbitrary form and
cookie data could prevent Thunderbird from functioning
properly. (CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way Thunderbird processed certain
APOP authentication requests. By sending certain responses
when Thunderbird attempted to authenticate against an APOP
server, a remote attacker could potentially acquire certain
portions of a user's authentication credentials. (CVE-2007-1558)
A flaw was found in the way Thunderbird displayed certain
web content. A malicious web page could generate content
which could overlay user interface elements such as the
hostname and security indicators, tricking users into
thinking they are visiting a different site. (CVE-2007-2871)
Users of Thunderbird are advised to apply this update, which
contains Thunderbird version 1.5.0.12 that corrects these
issues.
---------------------------------------------------------------------
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1
- Update to 1.5.0.12
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
b2bc6b0b1873b30decc11855918c76642e0519c5 SRPMS/thunderbird-1.5.0.12-1.fc6.src.rpm
b2bc6b0b1873b30decc11855918c76642e0519c5 noarch/thunderbird-1.5.0.12-1.fc6.src.rpm
319cb9203c2c79699043204a8a110e402f783d7a ppc/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.ppc.rpm
d026f2c02fae7bb3d554bb3d4ce8e412ae8f32ec ppc/thunderbird-1.5.0.12-1.fc6.ppc.rpm
fddac5a083a0319c39ba81f18d43422682079a91 x86_64/thunderbird-1.5.0.12-1.fc6.x86_64.rpm
ea9caab8666767718ae24cb44943dd5097e6f7b2 x86_64/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.x86_64.rpm
1eafd155c1d1013e137c0b948a06210145269f16 i386/thunderbird-1.5.0.12-1.fc6.i386.rpm
07bf8d163e7592a8adc9ee29a972b8f02bcb8f8b i386/debug/thunderbird-debuginfo-1.5.0.12-1.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 11 months