Fedora 8 Update: libchewing-0.3.0.901-0.fc8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8313
2008-09-27 03:03:23
--------------------------------------------------------------------------------
Name : libchewing
Product : Fedora 8
Version : 0.3.0.901
Release : 0.fc8
URL : http://chewing.csie.net/
Summary : Intelligent phonetic input method library for Traditional Chinese
Description :
libchewing is an intelligent phonetic input method library for Chinese.
It provides the core algorithm and logic that can be used by various
input methods. The Chewing input method is a smart bopomofo phonetics
input method that is useful for inputting Mandarin Chinese.
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 17 2008 Ding-Yi Chen <dchen at redhat dot com> - 0.3.0.901-0
- Upstream update.
* Thu May 29 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.3.0-12
- fix license tag
* Tue Apr 22 2008 Caius Chance <cchance(a)redhat.com> - 0.3.0-11.fc10
- Resolves: rhbz195416 (Initial input mode between Chinese and English.)
* Wed Feb 13 2008 Caius Chance <cchance(a)redhat.com> - 0.3.0-10.fc9
- Rebuild for F9.
* Tue Jan 8 2008 Caius Chance <cchance(a)redhat.com> - 0.3.0-9.devel
- Resolves: rhbz#200694 (Moving "Han-Yin" <-> Zhu-Yin" option to AUX UI.)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libchewing' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: ruby-mechanize-0.8.0-1.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8426
2008-09-27 03:05:17
--------------------------------------------------------------------------------
Name : ruby-mechanize
Product : Fedora 9
Version : 0.8.0
Release : 1.fc9
URL : http://mechanize.rubyforge.org/mechanize/
Summary : A handy web browsing ruby object
Description :
The Mechanize library is used for automating interaction with websites.
Mechanize automatically stores and sends cookies, follows redirects,
can follow links, and submit forms. Form fields can be populated and
submitted. Mechanize also keeps track of the sites that you have
visited as a history.
--------------------------------------------------------------------------------
Update Information:
New version 0.8.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 25 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.8.0-1
- 0.8.0
* Thu Aug 28 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.7.8-1
- 0.7.8
* Thu Jul 31 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.7.7-1
- 0.7.7
* Thu May 22 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.7.6-1
- 0.7.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ruby-mechanize' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 8 Update: kanyremote-5.3-1.fc8
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8432
2008-09-27 03:05:39
--------------------------------------------------------------------------------
Name : kanyremote
Product : Fedora 8
Version : 5.3
Release : 1.fc8
URL : http://anyremote.sourceforge.net/
Summary : KDE frontend for anyRemote
Description :
kAnyRemote package is KDE GUI frontend for anyRemote
(http://anyremote.sourceforge.net/). The overall goal of this project is to
provide remote control service on Linux through Bluetooth, InfraRed, Wi-Fi
or TCP/IP connection.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kanyremote' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: docbook-dtds-1.0-38.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8403
2008-09-27 03:03:33
--------------------------------------------------------------------------------
Name : docbook-dtds
Product : Fedora 9
Version : 1.0
Release : 38.fc9
URL : http://www.oasis-open.org/docbook/
Summary : SGML and XML document type definitions for DocBook
Description :
The DocBook Document Type Definition (DTD) describes the syntax of
technical documentation texts (articles, books and manual pages).
This syntax is XML-compliant and is developed by the OASIS consortium.
This package contains SGML and XML versions of the DocBook DTD.
--------------------------------------------------------------------------------
Update Information:
Following things were fixed: - wrong filenames for xml-dtd-4.4 and xml-dtd-4.5
iso entities - /ent/iso-cyr1.ent now correctly registered in xml catalog
(there was /ent/iso-cyrl.ent typo) - fixed broken unregistration of xml-dtds
from catalog (missing CAT_DIR variable in %preun section)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Ondrej Vasik <ovasik(a)redhat.com> - 1.0-38
- Fix wrong filenames for xml-dtd-4.4 and xml-dtd-4.5
iso entities(#461206)
- /ent/iso-cyr1.ent now correctly registered in xml catalog
(there was /ent/iso-cyrl.ent typo)
- fixed broken unregistration of xml-dtds from catalog
(missing CAT_DIR variable)
* Fri Jul 11 2008 Ondrej Vasik <ovasik(a)redhat.com> - 1.0-37
- fixed typo in post scriptlet(causing mishandling of DocBook
4.4 and 4.5 DTDs)-#453513
* Wed Jul 9 2008 Ondrej Vasik <ovasik(a)redhat.com> - 1.0-36
- use full paths in xmlcatalog registration
- changed License(#445008)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update docbook-dtds' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: yelp-2.22.1-5.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : yelp
Product : Fedora 9
Version : 2.22.1
Release : 5.fc9
URL : http://live.gnome.org/Yelp
Summary : A system documentation reader from the Gnome project
Description :
Yelp is the Gnome 2 help/documentation browser. It is designed
to help you browse all the documentation on your system in
one central tool.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.1-5
- Rebuild against newer gecko
* Wed Jul 16 2008 Christopher Aillon <caillon(a)redhat.com> - 2.22.1-4
- Rebuild against newer gecko
* Wed Jun 18 2008 Martin Stransky <stransky(a)redhat.com> - 2.22.1-3
- rebuild against xulrunner
* Mon May 19 2008 Matthew Barnes <mbarnes(a)redhat.com> - 2.22.1-2
- Require docbook-dtds (RH bug #447209).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update yelp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: ruby-gnome2-0.17.0-2.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : ruby-gnome2
Product : Fedora 9
Version : 0.17.0
Release : 2.fc9
URL : http://ruby-gnome2.sourceforge.jp/
Summary : Ruby binding of libgnome/libgnomeui-2.x
Description :
This is a set of bindings for the GNOME-2.x libraries for use from Ruby.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 0.17.0-2
- Rebuild against newer gecko
* Thu Sep 18 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> 0.17.0-1
- Update to 0.17.0
- Patch from svn to fix Ruby/GLib bug (bug 456816)
* Sat Jul 19 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.17.0-0.4.rc1
- F-9+: relax gecko libs dependency
- F-9+: bump version to fix EVR problem between F-8 branch
* Fri Jun 20 2008 Martin Stransky <stransky(a)redhat.com> - 0.17.0-0.2.rc1
- Rebuild against new xulrunner
* Sun Jun 8 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.17.0-0.1.rc1
- 0.17.0 rc1
- Remove upstreamed patches - 2 patches remain
- ruby-gnome2-0.17.0-rc1-script.patch
- ruby-gnome2-all-0.16.0-xulrunner.patch
- Restrict ruby abi dependency to exact 1.8 version
- Fix the license (to strict LGPLv2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ruby-gnome2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: totem-2.23.2-7.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : totem
Product : Fedora 9
Version : 2.23.2
Release : 7.fc9
URL : http://www.gnome.org/projects/totem/
Summary : Movie player for GNOME
Description :
Totem is simple movie player for the Gnome desktop. It features a
simple playlist, a full-screen mode, seek and volume controls, as well as
a pretty complete keyboard navigation.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 2.23.2-7
- Rebuild against newer gecko
* Fri Jul 25 2008 - Bastien Nocera <bnocera(a)redhat.com> - 2.23.2-6
- Add patch to make FLV videos thumbnail (#449279)
* Fri Jul 18 2008 Martin Stransky <stransky(a)redhat.com> - 2.23.2-5
- Rebuild against xulrunner 1.9.0.2 and fixed gecko dependency
* Wed Jun 18 2008 Owen Taylor <otaylor(a)redhat.com> - 2.23.2-4
- Rebuild against xulrunner 1.9 final
* Wed May 7 2008 - Bastien Nocera <bnocera(a)redhat.com> - 2.23.2-3
- Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD
playback bits
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update totem' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: mozvoikko-0.9.5-3.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : mozvoikko
Product : Fedora 9
Version : 0.9.5
Release : 3.fc9
URL : http://voikko.sourceforge.net
Summary : Finnish Voikko spell-checker extension for Mozilla programs
Description :
This is mozvoikko, an extension for Mozilla programs for using the Finnish
spell-checker Voikko.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mozvoikko' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: mugshot-1.2.2-2.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : mugshot
Product : Fedora 9
Version : 1.2.2
Release : 2.fc9
URL : http://mugshot.org/
Summary : Companion software for mugshot.org
Description :
Mugshot works with the server at mugshot.org to extend
the panel, web browser, music player and other parts of the desktop with
a "live social experience" and interoperation with online services you and
your friends use. It's fun and easy.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.2.2-2
- Rebuild against newer gecko
* Wed Jul 30 2008 Owen Taylor <otaylor(a)redhat.com> - 1.2.2-1
- Update to 1.2.2
- Fixes Firefox min version to 3.0.x, #451918 again
- Rebuild against hippo-canvas-0.3
* Wed Jun 18 2008 Owen Taylor <otaylor(a)redhat.com> - 1.2.1-1
- Update to 1.2.1 (Fixes Firefox min version #451918)
* Mon Jun 16 2008 Owen Taylor <otaylor(a)redhat.com> - 1.2.0-1
- Update to 1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mugshot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: Miro-1.2.4-3.fc9
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8425
2008-09-27 03:05:13
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 9
Version : 1.2.4
Release : 3.fc9
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Mozilla Firefox is an open source Web browser. Several flaws were found in
the processing of malformed web content. A web page containing malicious content
could cause Firefox to crash or, potentially, execute arbitrary code as the user
running Firefox. (CVE-2008-4058, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064) Several flaws were found in the way malformed
web content was displayed. A web page containing specially crafted content could
potentially trick a Firefox user into surrendering sensitive information.
(CVE-2008-4067, CVE-2008-4068) A flaw was found in the way Firefox handles
mouse click events. A web page containing specially crafted JavaScript code
could move the content window while a mouse-button was pressed, causing any item
under the pointer to be dragged. This could, potentially, cause the user to
perform an unsafe drag-and-drop action. (CVE-2008-3837) A flaw was found in
Firefox that caused certain characters to be stripped from JavaScript code. This
flaw could allow malicious JavaScript to bypass or evade script filters.
(CVE-2008-4065) For technical details regarding these flaws, please see the
Mozilla security advisories for Firefox 3.0.2.[1] All Firefox users should
upgrade to these updated packages, which contain patches that correct these
issues. [1] http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Christopher Aillon <caillon(a)redhat.com> - 1.2.4-3
- Rebuild against newer gecko
* Fri Jul 18 2008 Paul W. Frields <stickster(a)gmail.com> - 1.2.4-2
- Rebuild against xulrunner and fix dependencies
* Sun Jun 15 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 1.2.4-1
- Update to latest upstream (1.2.4)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449279 - totem-video-thumbnailer fails to work with flash video files
https://bugzilla.redhat.com/show_bug.cgi?id=449279
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months