Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 3 articles for you...
89
security advisorysecurity issuesoftware updateFedora 10: 2009-10981 Moderate: Blam Memory Corruption in Firefox
Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10981 2009-11-04 10:56:11 -------------------------------------------------------------------------------- Name : blam Product : Fedora 10 Version : 1.8.5 Release : 15.fc10 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak - 1.8.5-15 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak - 1.8.5-14 - Rebuild against newer gecko * Tue Aug 4 2009 Jan Horak - 1.8.5-13 - Rebuild against newer gecko * Tue Jul 21 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 -Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530569 - CVE-2009-3382 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530569 [ 3 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 4 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 5 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 6 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 7 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 8 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 9 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 10 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . Allpackages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Mar 20, 2017
•Important
Fedora
89
security advisorysoftware updateFedoraFedora: 2009-10878 Critical Issue in Firefox 3.5.4 Memory Leak
Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10878 2009-10-29 02:34:53 -------------------------------------------------------------------------------- Name : blam Product : Fedora 11 Version : 1.8.5 Release : 15.fc11 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 27 2009 Jan Horak - 1.8.5-15 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak - 1.8.5-14 - Rebuild against newer gecko * Mon Aug 3 2009 Christopher Aillon - 1.8.5-13 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Tue Jun 30 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530168 - CVE-2009-3376Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 3 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 4 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 5 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 6 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 7 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 8 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 9 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Oct 28, 2009
•Critical
Fedora
89
security advisoryfedorasecurity fixFedora: 10 Moderate: Firefox 3.0.14 Update For Blam Security Fixes
Update to new upstream Firefox version 3.0.14, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9494 2009-09-11 22:39:51 -------------------------------------------------------------------------------- Name : blam Product : Fedora 10 Version : 1.8.5 Release : 14.fc10 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.0.14, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2009 Jan Horak - 1.8.5-14 - Rebuild against newer gecko * Tue Aug 4 2009 Jan Horak - 1.8.5-13 - Rebuild against newer gecko * Tue Jul 21 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon -1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #521686 - CVE-2009-3070 Firefox 3.5 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521686 [ 2 ] Bug #521687 - CVE-2009-3071 Firefox 3.5.2 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521687 [ 3 ] Bug #521688 - CVE-2009-3072 Firefox 3.5.3 3.0.14 browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521688 [ 4 ] Bug #521690 - CVE-2009-3074 Firefox 3.5 3.0.14 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521690 [ 5 ] Bug #521691 - CVE-2009-3075 Firefox 3.5.2 3.0.14 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=521691 [ 6 ] Bug #521692 - CVE-2009-3076 Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal https://bugzilla.redhat.com/show_bug.cgi?id=521692 [ 7 ] Bug #521693 - CVE-2009-3077 Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=521693 [ 8 ] Bug #521694 - CVE-2009-3078 Firefox 3.5.3 3.0.14 Location bar spoofing via tall line-height Unicode characters https://bugzilla.redhat.com/show_bug.cgi?id=521694 [ 9 ] Bug #521695 - CVE-2009-3079 Firefox 3.5.3 3.0.14 Chrome privilege escalation with FeedWriter https://bugzilla.redhat.com/show_bug.cgi?id=521695 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Sep 11, 2009
Fedora
89
security advisorymoderatesecurity issueFedora 10: 2009-8288 Moderate: Blam Update Resolves Firefox Issues
Update to new upstream Firefox version 3.0.13, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. Note: Issues described in MFSA 2009-42 and MFSA 2009-43 were previously addressed via rebase of the NSS packages.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8288 2009-08-05 00:00:31 -------------------------------------------------------------------------------- Name : blam Product : Fedora 10 Version : 1.8.5 Release : 13.fc10 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.0.13, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. Note: Issues described in MFSA 2009-42 and MFSA 2009-43 were previously addressed via rebase of the NSS packages. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 4 2009 Jan Horak - 1.8.5-13 - Rebuild against newer gecko * Tue Jul 21 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 ChristopherAillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newer gecko -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Aug 04, 2009
•Important
Fedora
89
security advisorysecurity issuesoftware updateFedora: 2009-8279 Moderate: Firefox 3.5.2 Security Issue
Update to new upstream Firefox version 3.5.2, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8279 2009-08-05 00:00:09 -------------------------------------------------------------------------------- Name : blam Product : Fedora 11 Version : 1.8.5 Release : 13.fc11 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.5.2, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 3 2009 Christopher Aillon - 1.8.5-13 - Rebuild against newer gecko * Fri Jul 17 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Tue Jun 30 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Aug 04, 2009
•Important
Fedora
89
security advisoryupdatecriticalFedora 10 Blam Update: Critical Firefox 3.0.12 Security Issues
Update to new upstream Firefox version 3.0.12, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-7961 2009-07-23 18:32:19 -------------------------------------------------------------------------------- Name : blam Product : Fedora 10 Version : 1.8.5 Release : 12.fc10 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to new upstream Firefox version 3.0.12, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newergecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #512131 - CVE-2009-2463 Mozilla Base64 decoding crash https://bugzilla.redhat.com/show_bug.cgi?id=512131 [ 2 ] Bug #512133 - CVE-2009-2464 Mozilla crash with multiple RDFs in XUL tree https://bugzilla.redhat.com/show_bug.cgi?id=512133 [ 3 ] Bug #512135 - CVE-2009-2465 Mozilla double frame construction crashes https://bugzilla.redhat.com/show_bug.cgi?id=512135 [ 4 ] Bug #512128 - CVE-2009-2462 Mozilla Browser engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=512128 [ 5 ] Bug #512136 - CVE-2009-2466 Mozilla JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=512136 [ 6 ] Bug #512137 - CVE-2009-2467 Mozilla remote code execution during Flash player unloading https://bugzilla.redhat.com/show_bug.cgi?id=512137 [ 7 ] Bug #512142 - CVE-2009-2469 Mozilla remote code execution using watch and __defineSetter__ on SVG element https://bugzilla.redhat.com/show_bug.cgi?id=512142 [ 8 ] Bug #512146 - CVE-2009-2471 Mozilla setTimeout loses XPCNativeWrappers https://bugzilla.redhat.com/show_bug.cgi?id=512146 [ 9 ] Bug #512147 - CVE-2009-2472 Mozilla multiple cross origin wrapper bypasses https://bugzilla.redhat.com/show_bug.cgi?id=512147 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailinglist
Jul 23, 2009
•Critical
Fedora
89
security advisoryupdatecriticalFedora 10: Blam-1.8.5-10.fc10 Critical Update For Firefox 3.0.10
Update to Firefox 3.0.10 fixing one security issue: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Depending packages rebuilt against new Firefox are also included in this update. Additional bugs fixed in other packages: - totem: Fix YouTube plugin following web site changes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-4083 2009-04-28 00:41:58 -------------------------------------------------------------------------------- Name : blam Product : Fedora 10 Version : 1.8.5 Release : 10.fc10 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: Update to Firefox 3.0.10 fixing one security issue: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Depending packages rebuilt against new Firefox are also included in this update. Additional bugs fixed in other packages: - totem: Fix YouTube plugin following web site changes -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newer gecko -------------------------------------------------------------------------------- References: [ 1 ] Bug #497447 - CVE-2009-1313 Firefox crash in nsTextFrame::ClearTextRun() https://bugzilla.redhat.com/show_bug.cgi?id=497447 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Apr 27, 2009
•Critical
Fedora
89
security advisoryFedoramoderate severityModerate DoS Advisory for Fedora 9 Blam 1.8.5-8.fc9.1 Released
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-3875 2009-04-22 19:42:15 -------------------------------------------------------------------------------- Name : blam Product : Fedora 9 Version : 1.8.5 Release : 8.fc9.1 URL : Summary : An RSS/RDF feed reader Description : Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date -------------------------------------------------------------------------------- Update Information: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 21 2009 Christopher Aillon - 1.8.5-8.1 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-7.1 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-6.1 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-5.1 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-4.1 - Rebuild against newer gecko * Tue Nov 18 2008 Mamoru Tasaka - Rebuild against newer gtk-sharp2 (bug 468055) * Wed Nov 12 2008 Christopher Aillon - 1.8.5-3 - Rebuild against newer gecko * Wed Sep 24 2008 Christopher Aillon - 1.8.5-2 - Rebuild against newer gecko * Mon Jul 21 2008 Alex Lancaster - 1.8.5-1 - Update to upstream (1.8.5), fixes FTBS (#434382) - Set gecko version to new xulrunner: 1.9.0.1 - BR: gecko-devel-unstable - Drop a number of patches which no longer apply - Add new icons to file list. * Tue Feb 19 2008 Fedora Release Engineering - 1.8.3-14 - Autorebuild for GCC 4.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #496252 - CVE-2009-1302 Firefox 3Layout engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496252 [ 2 ] Bug #496253 - CVE-2009-1303 Firefox 2 and 3 Layout engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496253 [ 3 ] Bug #496255 - CVE-2009-1304 Firefox 3 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496255 [ 4 ] Bug #496256 - CVE-2009-1305 Firefox 2 and 3 JavaScript engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496256 [ 5 ] Bug #486704 - CVE-2009-0652 firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks) https://bugzilla.redhat.com/show_bug.cgi?id=486704 [ 6 ] Bug #496262 - CVE-2009-1306 Firefox jar: scheme ignores the content-disposition: header on the inner URI https://bugzilla.redhat.com/show_bug.cgi?id=496262 [ 7 ] Bug #496263 - CVE-2009-1307 Firefox Same-origin violations when Adobe Flash loaded via view-source: protocol https://bugzilla.redhat.com/show_bug.cgi?id=496263 [ 8 ] Bug #496266 - CVE-2009-1308 Firefox XSS hazard using third-party stylesheets and XBL bindings https://bugzilla.redhat.com/show_bug.cgi?id=496266 [ 9 ] Bug #496267 - CVE-2009-1309 Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString https://bugzilla.redhat.com/show_bug.cgi?id=496267 [ 10 ] Bug #496270 - CVE-2009-1310 Firefox Malicious search plugins can inject code into arbitrary sites https://bugzilla.redhat.com/show_bug.cgi?id=496270 [ 11 ] Bug #496271 - CVE-2009-1311 Firefox POST data sent to wrong site when saving web page with embedded frame https://bugzilla.redhat.com/show_bug.cgi?id=496271 [ 12 ] Bug #496274 - CVE-2009-1312 Firefox allows Refresh header to redirect to javascript: URIs https://bugzilla.redhat.com/show_bug.cgi?id=496274 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su-c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Apr 23, 2009
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!