Fedora 9: 2009-3099 Critical Vulnerabilities Found in Firefox Memory Issues

Totem is simple movie player for the Gnome desktop. It features a

simple playlist, a full-screen mode, seek and volume controls, as well as

a pretty complete keyboard navigation.

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL

Runtime environment for Mozilla Firefox. A memory corruption flaw was

discovered in the way Firefox handles XML files containing an XSLT transform. A

remote attacker could use this flaw to crash Firefox or, potentially, execute

arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was

discovered in the way Firefox handles certain XUL garbage collection events. A

remote attacker could use this flaw to crash Firefox or, potentially, execute

arbitrary code as the user running Firefox. (CVE-2009-1044) This update also

provides depending packages rebuilt against new Firefox version. Miro updates

to upstream 2.0.3. Provides new features and fixes various bugs in 1.2.x series

* Fri Mar 27 2009 Christopher Aillon - 2.23.2-13

- Rebuild against newer gecko

* Fri Mar 6 2009 Christopher Aillon - 2.23.2-12

- BuildRequire: gail-devel evolution-data-server-devel

* Fri Mar 6 2009 Jan Horak - 2.23.2-11

- Rebuild against newer gecko

* Wed Feb 4 2009 Christopher Aillon - 2.23.2-10

- Rebuild against newer gecko

* Wed Dec 17 2008 Christopher Aillon - 2.23.2-9

- Rebuild against newer gecko

* Wed Nov 12 2008 Christopher Aillon - 2.23.2-8

- Rebuild against newer gecko

* Wed Sep 24 2008 Christopher Aillon - 2.23.2-7

- Rebuild against newer gecko

* Fri Jul 25 2008 - Bastien Nocera - 2.23.2-6

- Add patch to make FLV videos thumbnail (#449279)

* Fri Jul 18 2008 Martin Stransky - 2.23.2-5

- Rebuild against xulrunner 1.9.0.1 and fixed gecko dependency

* Wed Jun 18 2008 Owen Taylor - 2.23.2-4

- Rebuild against xulrunner 1.9 final

* Wed May 7 2008 - Bastien Nocera - 2.23.2-3

- Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD

playback bits

su -c 'yum update totem' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/