[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[SECURITY] Fedora 9 Update: blam-1.8.5-10.fc9.1



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-6411
2009-06-15 22:07:28
--------------------------------------------------------------------------------

Name        : blam
Product     : Fedora 9
Version     : 1.8.5
Release     : 10.fc9.1
URL         : http://www.cmartin.tk/blam.html
Summary     : An RSS/RDF feed reader
Description :
Blam is a tool that helps you keep track of the growing
number of news feeds distributed as RSS. Blam lets you
subscribe to any number of feeds and provides an easy to
use and clean interface to stay up to date

--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.0.11, fixing multiple security issues
detailed in the upstream advisories:    http://www.mozilla.org/security/known-
vulnerabilities/firefox30.html#firefox3.0.11    Update also includes all
packages depending on gecko-libs rebuild against new version of Firefox /
XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 11 2009 Christopher Aillon <caillon redhat com> - 1.8.5-10.1
- Rebuild against newer gecko
* Mon Apr 27 2009 Christopher Aillon <caillon redhat com> - 1.8.5-9.1
- Rebuild against newer gecko
* Tue Apr 21 2009 Christopher Aillon <caillon redhat com> - 1.8.5-8.1
- Rebuild against newer gecko
* Fri Mar 27 2009 Christopher Aillon <caillon redhat com> - 1.8.5-7.1
- Rebuild against newer gecko
* Fri Mar  6 2009 Jan Horak <jhorak redhat com> - 1.8.5-6.1
- Rebuild against newer gecko
* Wed Feb  4 2009 Christopher Aillon <caillon redhat com> - 1.8.5-5.1
- Rebuild against newer gecko
* Wed Dec 17 2008 Christopher Aillon <caillon redhat com> - 1.8.5-4.1
- Rebuild against newer gecko
* Tue Nov 18 2008 Mamoru Tasaka <mtasaka ioa s u-tokyo ac jp>
- Rebuild against newer gtk-sharp2 (bug 468055)
* Wed Nov 12 2008 Christopher Aillon <caillon redhat com> - 1.8.5-3
- Rebuild against newer gecko
* Wed Sep 24 2008 Christopher Aillon <caillon redhat com> - 1.8.5-2
- Rebuild against newer gecko
* Mon Jul 21 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 1.8.5-1
- Update to upstream (1.8.5), fixes FTBS (#434382)
- Set gecko version to new xulrunner: 1.9.0.1
- BR: gecko-devel-unstable
- Drop a number of patches which no longer apply
- Add new icons to file list.
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng fedoraproject org> - 1.8.3-14
- Autorebuild for GCC 4.3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #503568 - CVE-2009-1392 Firefox browser engine crashes
        https://bugzilla.redhat.com/show_bug.cgi?id=503568
  [ 2 ] Bug #503569 - CVE-2009-1832 Firefox double frame construction flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=503569
  [ 3 ] Bug #503570 - CVE-2009-1833 Firefox JavaScript engine crashes
        https://bugzilla.redhat.com/show_bug.cgi?id=503570
  [ 4 ] Bug #503573 - CVE-2009-1834 Firefox URL spoofing with invalid unicode characters
        https://bugzilla.redhat.com/show_bug.cgi?id=503573
  [ 5 ] Bug #503576 - CVE-2009-1835 Firefox Arbitrary domain cookie access by local file: resources
        https://bugzilla.redhat.com/show_bug.cgi?id=503576
  [ 6 ] Bug #503578 - CVE-2009-1836 Firefox SSL tampering via non-200 responses to proxy CONNECT requests
        https://bugzilla.redhat.com/show_bug.cgi?id=503578
  [ 7 ] Bug #503579 - CVE-2009-1837 Firefox Race condition while accessing the private data of a NPObject JS wrapper class object
        https://bugzilla.redhat.com/show_bug.cgi?id=503579
  [ 8 ] Bug #503580 - CVE-2009-1838 Firefox arbitrary code execution flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=503580
  [ 9 ] Bug #503581 - CVE-2009-1839 Firefox information disclosure flaw
        https://bugzilla.redhat.com/show_bug.cgi?id=503581
  [ 10 ] Bug #503582 - CVE-2009-1840 Firefox XUL scripts skip some security checks
        https://bugzilla.redhat.com/show_bug.cgi?id=503582
  [ 11 ] Bug #503583 - CVE-2009-1841 Firefox JavaScript arbitrary code execution
        https://bugzilla.redhat.com/show_bug.cgi?id=503583
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update blam' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]