Fedora 10 Update: mugshot-1.2.2-7.fc10

March 28, 2009

A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform

Summary

Mugshot works with the server at mugshot.org to extend

the panel, web browser, music player and other parts of the desktop with

a "live social experience" and interoperation with online services you and

your friends use. It's fun and easy.

A memory corruption flaw was discovered in the way Firefox handles XML files

containing an XSLT transform. A remote attacker could use this flaw to crash

Firefox or, potentially, execute arbitrary code as the user running Firefox.

(CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL

garbage collection events. A remote attacker could use this flaw to crash

Firefox or, potentially, execute arbitrary code as the user running Firefox.

(CVE-2009-1044)

* Fri Mar 27 2009 Christopher Aillon - 1.2.2-7

- Rebuild against newer gecko

* Fri Mar 6 2009 Jan Horak - 1.2.2-6

- Rebuild against newer gecko

* Wed Feb 4 2009 Christopher Aillon - 1.2.2-5

- Rebuild against newer gecko

* Wed Dec 17 2008 Christopher Aillon - 1.2.2-4

- Rebuild against newer gecko

su -c 'yum update mugshot' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2009-3100 2009-03-28 00:57:36 Product : Fedora 10 Version : 1.2.2 Release : 7.fc10 URL : Summary : Companion software for mugshot.org Description : Mugshot works with the server at mugshot.org to extend the panel, web browser, music player and other parts of the desktop with a "live social experience" and interoperation with online services you and your friends use. It's fun and easy. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044) * Fri Mar 27 2009 Christopher Aillon - 1.2.2-7 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.2.2-6 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.2.2-5 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.2.2-4 - Rebuild against newer gecko su -c 'yum update mugshot' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce