Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 11 FEDORA-2009-9505 Moderate: Firefox 3.5.3 Security Issues

fedora
Calendar Grey September 11, 2009
Dist Fedora Esm H88
The software has been revised in Fedora 12 to tackle security vulnerabilities found in Firefox 3.5.3, improving efficiency and reliability.
Update to new upstream Firefox version 3.5.3, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/...

Summary

A gtk2 chm document viewer.

It uses chmlib to extract files. It uses gecko to display pages. It supports

displaying multilingual pages due to gecko. It features bookmarks and tabs.

The tabs could be used to jump inside the chm file conveniently. Its UI is

clean and handy, also is well localized. It is actively developed and

maintained. The author of chmsee is Jungle Ji and several other great people.

Hint

* Unlike other chm viewers, chmsee extracts files from chm file, and then read

and display them. The extracted files could be found in $HOME/.chmsee/bookshelf

directory. You can clean those files at any time and there is a special config

option for that.

* The bookmark is related to each file so not all bookmarks will be loaded,

only current file's.

* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.

Update Information:

Update to new upstream Firefox version 3.5.3, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

Change Log

* Wed Sep 9 2009 Jan Horak - 1.0.1-11 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon - 1.0.1-10 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak - 1.0.1-9 - Rebuild against newer gecko * Tue Jul 14 2009 bbbush - 1.0.1-8 - revert to 1.0.1 as latest version crash on xulrunner-1.9.1.2 * Sun Jul 12 2009 bbbush - 1.0.6-1 - update to 1.0.6 - update project location. Chmsee moved to google code since 2009-01-05, co-maintained by Li Daobing and Jungle Ji - update build steps to use CMake - Chmsee 1.0.3 was released on 2009-01-10, added "copy page location" in context menu, updated translation - Chmsee 1.0.4 was released on 2009-03-14, added "drag and drop" support, dropped cs2w - Chmsee 1.0.5 was released on 2009-05-17, added fullscreen support, switched to CMake, supported 6 more new languages - Chmsee 1.0.6 was released on 2009-07-12, added index support, supported 8 more new languages * Tue Jun 30 2009 Christopher Aillon - 1.0.1-7 - Rebuild against newer gecko

References


[ 1 ] Bug #521684 - CVE-2009-3069 Firefox 3.5 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521684 [ 2 ] Bug #521686 - CVE-2009-3070 Firefox 3.5 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521686 [ 3 ] Bug #521687 - CVE-2009-3071 Firefox 3.5.2 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521687 [ 4 ] Bug #521688 - CVE-2009-3072 Firefox 3.5.3 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521688 [ 5 ] Bug #521689 - CVE-2009-3073 Firefox 3.5 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521689 [ 6 ] Bug #521690 - CVE-2009-3074 Firefox 3.5 3.0.14 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521690 [ 7 ] Bug #521691 - CVE-2009-3075 Firefox 3.5.2 3.0.14 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521691 [ 8 ] Bug #521693 - CVE-2009-3077 F...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update chmsee' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: chmsee
Product: Fedora 11
Version: 1.0.1
Release: 11.fc11
Summary: A Gtk+2 CHM document viewer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here