[SECURITY] Fedora Core 6 Update: epiphany-2.16.0-5.fc6

Christopher Aillon caillon at redhat.com
Wed Nov 8 13:00:36 UTC 2006 

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-1191
2006-11-08
---------------------------------------------------------------------

Product     : Fedora Core 6
Name        : epiphany
Version     : 2.16.0
Release     : 5.fc6
Summary     : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine

---------------------------------------------------------------------
Update Information:

Mozilla Firefox is an open source Web browser.

Several flaws were found in the way Firefox processes
certain malformed Javascript code. A malicious web page
could cause the execution of Javascript code in such a way
that could cause Firefox to crash or execute arbitrary code
as the user running Firefox. (CVE-2006-5463, CVE-2006-5747,
CVE-2006-5748)

Several flaws were found in the way Firefox renders web
pages. A malicious web page could cause the browser to crash
or possibly execute arbitrary code as the user running
Firefox. (CVE-2006-5464)

Users of Firefox are advised to upgrade to these erratum
packages, which contain Firefox version 1.5.0.8 that
corrects these issues. 

---------------------------------------------------------------------
* Tue Nov  7 2006 Christopher Aillon <caillon at redhat.com> - 2.16.0-5.fc6
- Rebuild against newer gecko
* Thu Oct 12 2006 Christopher Aillon <caillon at redhat.com> - 2.16.0-4.fc6
- Remove console spew about pango; it's no longer relevant.
* Thu Oct 12 2006 Christopher Aillon <caillon at redhat.com> - 2.16.0-3.fc6
- Update requires to the virtual gecko version instead of a specific app
* Thu Sep 14 2006 Christopher Aillon <caillon at redhat.com> - 2.16.0-2.fc6
- Rebuild
* Sun Sep  3 2006 Matthias Clasen <mclasen at redhat.com> - 2.16.0-1.fc6
- Update to 2.16.0
* Wed Aug 30 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.92-3.fc6
- Install the fonts and pango schemas  (#204602)
* Tue Aug 29 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.92-2.fc6
- Use Pango by default
- Add a BR for perl-XML-Parser
* Mon Aug 21 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.92-1.fc6
- Update to 2.15.92
* Sun Aug 13 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.91-2.fc6
- Rebuild
* Sun Aug 13 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.91-1.fc6
- Update to 2.15.91
* Wed Aug  9 2006 Jesse Keating <jkeating at redhat.com> - 2.15.4-2
- bump
* Sat Jul 29 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.4-1
- Update to 2.15.4
- Rebuild against firefox-devel
* Tue Jul 18 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.1-2
- Go back to 2.15.1, since gecko 1.8 is still missing
* Wed Jul 12 2006 Jesse Keating <jkeating at redhat.com> - 2.15.2-1.1
- rebuild
* Wed May 17 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.2-1
- Update to 2.15.2
* Wed May 10 2006 Matthias Clasen <mclasen at redhat.com> - 2.15.1-1
- Update to 2.15.1
* Thu May  4 2006 Dan Williams <dcbw at redhat.com> - 2.14.1-3
- Rebuild for a mozilla update
* Mon Apr 10 2006 Matthias Clasen <mclasen at redhat.com> - 2.14.1-2
- Update to 2.14.1
* Sun Mar 12 2006 Ray Strode <rstrode at redhat.com> - 2.14.0-1
- Update to 2.14.0
* Mon Feb 27 2006 Matthias Clasen <mclasen at redhat.com> - 1.9.8-1
- Update to 1.9.8
* Mon Feb 13 2006 Christopher Aillon <caillon at redhat.com> - 1.9.7-1
- Update to 1.9.7
* Mon Feb 13 2006 Jesse Keating <jkeating at redhat.com> - 1.9.6-3.1
- rebump for build order issues during double-long bump
* Sat Feb 11 2006 Matthias Clasen <mclasen at redhat.com> - 1.9.6-3
- turn on zeroconf and NetworkManager support
* Tue Feb  7 2006 Jesse Keating <jkeating at redhat.com> - 1.9.6-2.1
- rebuilt for new gcc4.1 snapshot and glibc changes
* Sun Feb  5 2006 Matthias Clasen <mclasen at redhat.com> 1.9.6-2
- Update requires
* Tue Jan 31 2006 Matthias Clasen <mclasen at redhat.com> 1.9.6-1
- Update to 1.9.6
* Fri Jan 20 2006 Matthias Clasen <mclasen at redhat.com> 1.9.5.1-1
- Update to 1.9.5.1
* Mon Jan  2 2006 Christopher Aillon <caillon at redhat.com> 1.9.4-1
- Update to 1.9.4
* Thu Dec 15 2005 Matthias Clasen <mclasen at redhat.com> 1.9.3.1-1
- Update to 1.9.3.1
* Fri Dec  9 2005 Jesse Keating <jkeating at redhat.com>
- rebuilt
* Fri Dec  2 2005 Matthias Clasen <mclasen at redhat.com> - 1.9.2-1
- Update to 1.9.2
- Package plugins
* Tue Oct 18 2005 Christopher Aillon <caillon at redhat.com> - 1.8.2-3
- Build on ppc64
* Tue Oct 18 2005 Christopher Aillon <caillon at redhat.com> - 1.8.2-2
- Rebuild
* Thu Oct  6 2005 Christopher Aillon <caillon at redhat.com> - 1.8.2-1
- Update to 1.8.2
* Mon Sep  5 2005 Christopher Aillon <caillon at redhat.com> - 1.8.0-1
- Update to 1.8.0
* Mon Aug 29 2005 Christopher Aillon <caillon at redhat.com> - 1.7.6-1
- Update to 1.7.6
* Tue Aug 23 2005 Christopher Aillon <caillon at redhat.com> - 1.7.5-1
- Update to 1.7.5
* Mon Aug 15 2005 Christopher Aillon <caillon at redhat.com> - 1.7.4-2
- Rebuild
* Tue Aug  9 2005 Christopher Aillon <caillon at redhat.com> - 1.7.4-1
- Update to 1.7.4
* Sat Jul 30 2005 Christopher Aillon <caillon at redhat.com> - 1.7.3-2
- Rebuild against new mozilla
* Tue Jul 26 2005 Christopher Aillon <caillon at redhat.com> - 1.7.3-1
- Update to 1.7.3
* Tue Jul 19 2005 Christopher Aillon <caillon at redhat.com> - 1.7.2-2
- Rebuild against new mozilla
* Mon Jul 11 2005 Christopher Aillon <caillon at redhat.com> - 1.7.2-1
- Update to 1.7.2
* Tue Jul  5 2005 Christopher Aillon <caillon at redhat.com> - 1.7.1-3
- Add the packages needed for building against -devel to its Requires:
- Add builds for ia64 s390(x)
* Thu Jun 16 2005 Christopher Aillon <caillon at redhat.com> - 1.7.1-2
- Specfile cleanup
- Make the devel package depend on the main package
* Fri Jun 10 2005 Christopher Aillon <caillon at redhat.com> - 1.7.1-1
- Update to 1.7.1
* Fri May 13 2005 Christopher Aillon <caillon at redhat.com> - 1.6.3-1
- Update to 1.6.3
* Fri May 13 2005 Christopher Aillon <caillon at redhat.com> - 1.6.1-3
- Depend on mozilla 1.7.8
* Sat Apr 16 2005 Christopher Aillon <caillon at redhat.com> - 1.6.1-2
- Depend on mozilla 1.7.7
* Wed Apr  6 2005 Elliot Lee <sopwith at redhat.com> - 1.6.1-1
- Update to 1.6.1
* Wed Mar  9 2005 Christopher Aillon <caillon at redhat.com> - 1.5.8-3
- Depend on mozilla 1.7.6
* Sat Mar  5 2005 Christopher Aillon <caillon at redhat.com> - 1.5.8-2
- Rebuild
* Thu Mar  3 2005 Marco Pesenti Gritti <mpg at redhat.com> - 1.5.8-1
- Update to 1.5.8
* Mon Feb 28 2005 Matthias Clasen <mclasen at redhat.com> - 1.5.7-1
- Update to 1.5.7
* Wed Feb  9 2005 Matthias Clasen <mclasen at redhat.com> - 1.5.6-1
- Update to 1.5.6
* Wed Feb  2 2005 Matthias Clasen <mclasen at redhat.com> - 1.5.5-1
- Update to 1.5.5
* Mon Dec 20 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.7-2
- Add the manual to the package
* Mon Dec 20 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.7-1
- Update to 1.4.7
* Mon Dec 20 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.6-2
- Depend on mozilla 1.7.5
* Mon Dec 20 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.6-1
- Update to 1.4.6
* Tue Nov  9 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-6
- Add docs
* Thu Nov  4 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-5
- Update the desktop files database. Fix #135566
* Mon Oct 18 2004 Christopher Aillon <caillon at redhat.com> 1.4.4-4
- Put back ppc
* Tue Oct 12 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-3
- Remove generic name patch, epiphany is no more default
* Tue Oct 12 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-2
- Disable direct handling of downloads by external applications
* Mon Oct 11 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-1
- Add a devel package for extensions development
* Mon Oct 11 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.4-0
- Update to 1.4.4
* Thu Oct  7 2004 Marco Pesenti Gritti <mpg at redhat.com> - 1.4.3-0
- Remove mozilla 1.7.3 compatibility patch
- Do not disable the nautilus view, it has been removed upstream
* Sun Sep 26 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.6
- Don't require a specific mozilla rpm release, only the version
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.5
- Change .desktop file name to "Web Browser" instead of "Epiphany..."
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.4
- Include epiphany's default .desktop file - don't remove it.
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.3
- Make sure to include the epoch for the mozilla version.
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.2
- Add patch to get this epiphany building with moz 1.7.3.
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.1
- Don't query for the mozilla version, use an explicit version number
* Fri Sep 24 2004 Christopher Blizzard <blizzard at redhat.com> - 1.4.0-0.3.0
- Update to 1.4.0
* Fri Sep 24 2004 Mark McLoughlin <markmc at redhat.com> - 1.3.8-0.3.3
- Remove the bookmarks editor from the menu (bug #132549)
* Wed Sep 22 2004 Christopher Aillon <caillon at redhat.com> 1.3.8-0.3.2
- Rebuilt to pick up new mozilla changes
- Drop ppc from the build since mozilla doesn't build there anymore.
* Fri Sep  3 2004 Christopher Blizzard <blizzard at redhat.com>
- Bump release and rebuild.
* Wed Sep  1 2004 Christopher Blizzard <blizzard at redht.com>
- Update to 1.3.8
* Tue Aug 17 2004 Christopher Blizzard <blizzard at redhat.com>
- Update to 1.3.5.
- Remove epiphany-bin - it's not there anymore.
- Change to .bz2 source tarball.
* Mon Aug  9 2004 Christopher Aillon <caillon at redhat.com>
- Rebuild
* Tue Aug  3 2004 Christopher Blizzard <blizzard at redhat.com>
- Update to 1.2.7
- Disable nautilus view since it's broken
* Wed Jun 23 2004 Christopher Blizzard <blizzard at redhat.com>
- Update to 1.2.6
* Tue Jun 22 2004 Christopher Blizzard <blizzard at redhat.com>
- Update to 1.2.5
* Tue Jun 15 2004 Elliot Lee <sopwith at redhat.com>
- rebuilt
* Wed May  5 2004 Warren Togami <wtogami at redhat.com> - 1.2.4-1
- update to 1.2.4 stable
* Wed Mar 10 2004 Christopher Blizzard <blizzard at redhat.com> - 1.1.12-0
- Update to 1.1.12
- remove jrb patch for file chooser api changes since it appears
  to have been merged upstream
* Fri Mar  5 2004 Jeremy Katz <katzj at redhat.com> - 1.1.10-2
- rebuild
* Thu Mar  4 2004 Jeremy Katz <katzj at redhat.com> - 1.1.10-1
- 1.1.10
- add patch from jrb for file-chooser api changes
* Tue Mar  2 2004 Elliot Lee <sopwith at redhat.com>
- rebuilt
* Sun Feb 22 2004 Jeremy Katz <katzj at redhat.com> 1.1.9-1
- update to 1.1.9
- reenable nautilus view
* Thu Feb 19 2004 Christopher Blizzard <blizzard at redhat.com> 1.0.7-3
- disable the nautilus view.  doesn't seem to work anymore.
* Fri Feb 13 2004 Elliot Lee <sopwith at redhat.com>
- rebuilt
* Tue Jan 20 2004 Jeremy Katz <katzj at redhat.com> 1.0.7-1
- 1.0.7
* Tue Dec  2 2003 Christopher Blizzard <blizzard at redhat.com> 1.0.4-3
- Add a BuildRequires for nautilus so that the view is built properly.
* Mon Oct 27 2003 Jakub Jelinek <jakub at redhat.com> 1.0.4-2
- link epiphany-bin with -Wl,-rpath,/usr/lib/mozilla-1.4.1,--enable-new-dtags
  to make it prelinkable
* Fri Oct 24 2003 Jeremy Katz <katzj at redhat.com> 1.0.4-1
- 1.0.4
* Fri Oct 24 2003 Christopher Blizzard <blizzard at redhat.com> 1.0.1-3
- Enable the nautilus view
* Fri Oct 10 2003 Christopher Blizzard <blizzard at redhat.com> 1.0.1-2
- Add patch to set the home page to the release notes
* Mon Oct  6 2003 Jeremy Katz <katzj at redhat.com> 1.0.1-1
- 1.0.1
* Fri Sep 26 2003 Chris Blizzard <blizzard at redhat.com> 1.0-2
- Updates for Mozilla 1.4.1
* Tue Sep  9 2003 Jeremy Katz <katzj at redhat.com> 1.0-1
- 1.0
* Wed Sep  3 2003 Jeremy Katz <katzj at redhat.com> 0.9.3-1
- 0.9.3
* Mon Aug 25 2003 Jeremy Katz <katzj at redhat.com> 0.9.2-1
- 0.9.2
* Mon Aug 11 2003 Jeremy Katz <katzj at redhat.com> 0.8.4-1
- 0.8.4
* Sun Aug 10 2003 Jeremy Katz <katzj at redhat.com> 0.8.3-1
- 0.8.3
* Sun Aug  3 2003 Jeremy Katz <katzj at redhat.com> 0.8.2-1
- 0.8.2
* Fri Jul 25 2003 Christopher Blizzard <blizzard at redhat.com> 0.8.0-2
- Add ppc to the list of arches.
* Tue Jul 15 2003 Matt Wilson <msw at redhat.com> 0.8.0-1
- 0.8.0
* Fri Jul 11 2003 Christopher Blizzard <blizzard at redhat.com> 0.7.3-3
- be sure to include the mozilla rpm in the build deps since it's
  queried
* Tue Jul  1 2003 Elliot Lee <sopwith at redhat.com> 0.7.3-2
- Fix mozilla dep for new epoch
* Sun Jun 29 2003 Jeremy Katz <katzj at redhat.com> 0.7.3-1
- 0.7.3
* Sat Jun 28 2003 Jeremy Katz <katzj at redhat.com> 0.7.2-1
- update to 0.7.2
* Sun Jun  8 2003 Jeremy Katz <katzj at redhat.com> 0.7.0-4
- fix crash on startup in egg-menu-merge on x86_64
* Sat Jun  7 2003 Jeremy Katz <katzj at redhat.com> 0.7.0-3
- fix build on x86_64
* Sat Jun  7 2003 Jeremy Katz <katzj at redhat.com> 0.7.0-2
- fix build with gcc 3.3
* Sat Jun  7 2003 Jeremy Katz <katzj at redhat.com> 0.7.0-1
- update to 0.7.0
* Mon Jun  2 2003 Elliot Lee <sopwith at redhat.com> 0.6.1-2
- Rebuild to fix broken mozilla dep, patch for mozilla 1.4
* Mon May 19 2003 Jeremy Katz <katzj at redhat.com> 0.6.1-1
- 0.6.1
* Fri May  9 2003 Jeremy Katz <katzj at redhat.com> 0.6.0-4
- add patch to fix gint/gpointer conversion bugs for 64bit arches
* Fri May  9 2003 Jeremy Katz <katzj at redhat.com> 0.6.0-3
- only build on arches mozilla is built on
* Fri May  9 2003 Jeremy Katz <katzj at redhat.com> 0.6.0-2
- rebuild against new mozilla, make mozilla requires dynamic
* Sun May  4 2003 Jeremy Katz <katzj at redhat.com> 0.6.0-1
- update to 0.6.0
- fix tyop in %postun
* Wed Apr 16 2003 Bill Nottingham <notting at redhat.com> 0.5.0-3
- make it build with mozilla-1.4 (shouldn't affect moz-1.2/moz-1.3 builds)
* Mon Apr 14 2003 Jeremy Katz <katzj at redhat.com> 0.5.0-2
- add some buildrequires, prereq GConf2
- disable building nautilus view
* Sun Apr 13 2003 Jeremy Katz <katzj at redhat.com> 
- Initial build.

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

19d88108a7627d4ab3b1342d28056dd26c2f59b0  SRPMS/epiphany-2.16.0-5.fc6.src.rpm
19d88108a7627d4ab3b1342d28056dd26c2f59b0  noarch/epiphany-2.16.0-5.fc6.src.rpm
e1dea6d99a237c23cf9a75da8cd81be6ba3865f2  ppc/epiphany-devel-2.16.0-5.fc6.ppc.rpm
93db445ea55c5d3f8f65f5bc6bf43de2d35bed24  ppc/debug/epiphany-debuginfo-2.16.0-5.fc6.ppc.rpm
d83559be2c18e20db65e0bc7a03386d6e66c7228  ppc/epiphany-2.16.0-5.fc6.ppc.rpm
baaf00ac2ed747a6f3d4095eb2bfd092d62c8721  x86_64/epiphany-devel-2.16.0-5.fc6.x86_64.rpm
b7a572a08c801da63793b2f48727a7fa92bcec75  x86_64/epiphany-2.16.0-5.fc6.x86_64.rpm
5556a50c22f40ceb9f45444b0c98e0add2278671  x86_64/debug/epiphany-debuginfo-2.16.0-5.fc6.x86_64.rpm
d7d190b80bac25e6917aed7c0599e5fd5a2199f3  i386/debug/epiphany-debuginfo-2.16.0-5.fc6.i386.rpm
ae30d66dea6112d3f00f631a951b0bd7d113755e  i386/epiphany-devel-2.16.0-5.fc6.i386.rpm
6ab0673280d444d7f6b99f6f4d62980cb7788381  i386/epiphany-2.16.0-5.fc6.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------

More information about the Fedora-package-announce mailing list