Update to Firefox 3.0.10 fixing one security issue: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Depending packages rebuilt against new Firefox are also included in this update. Additional bugs fixed in other packages: - totem: Fix YouTube plugin following web site changes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-4078 2009-04-28 00:41:54 -------------------------------------------------------------------------------- Name : totem Product : Fedora 9 Version : 2.23.2 Release : 16.fc9 URL : https://wiki.gnome.org/Apps Summary : Movie player for GNOME Description : Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation. -------------------------------------------------------------------------------- Update Information: Update to Firefox 3.0.10 fixing one security issue: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Depending packages rebuilt against new Firefox are also included in this update. Additional bugs fixed in other packages: - totem: Fix YouTube plugin following web site changes -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 27 2009 Christopher Aillon - 2.23.2-16 - Rebuild against newer gecko * Fri Apr 24 2009 Bastien Nocera 2.23.2-15 - Update youtube plugin to latest upstream (#487927) * Tue Apr 21 2009 Christopher Aillon - 2.23.2-14 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 2.23.2-13 - Rebuild against newer gecko * Fri Mar 6 2009 Christopher Aillon - 2.23.2-12 - BuildRequire: gail-devel evolution-data-server-devel * Fri Mar 6 2009 Jan Horak - 2.23.2-11 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 2.23.2-10 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon -2.23.2-9 - Rebuild against newer gecko * Wed Nov 12 2008 Christopher Aillon - 2.23.2-8 - Rebuild against newer gecko * Wed Sep 24 2008 Christopher Aillon - 2.23.2-7 - Rebuild against newer gecko * Fri Jul 25 2008 - Bastien Nocera - 2.23.2-6 - Add patch to make FLV videos thumbnail (#449279) * Fri Jul 18 2008 Martin Stransky - 2.23.2-5 - Rebuild against xulrunner 1.9.0.1 and fixed gecko dependency * Wed Jun 18 2008 Owen Taylor - 2.23.2-4 - Rebuild against xulrunner 1.9 final * Wed May 7 2008 - Bastien Nocera - 2.23.2-3 - Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD playback bits -------------------------------------------------------------------------------- References: [ 1 ] Bug #497447 - CVE-2009-1313 Firefox crash in nsTextFrame::ClearTextRun() https://bugzilla.redhat.com/show_bug.cgi?id=497447 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update totem' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-3875 2009-04-22 19:42:15 -------------------------------------------------------------------------------- Name : totem Product : Fedora 9 Version : 2.23.2 Release : 14.fc9 URL : https://wiki.gnome.org/Apps Summary : Movie player for GNOME Description : Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation. -------------------------------------------------------------------------------- Update Information: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 21 2009 Christopher Aillon - 2.23.2-14 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 2.23.2-13 - Rebuild against newer gecko * Fri Mar 6 2009 Christopher Aillon - 2.23.2-12 - BuildRequire: gail-devel evolution-data-server-devel * Fri Mar 6 2009 Jan Horak - 2.23.2-11 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 2.23.2-10 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 2.23.2-9 - Rebuild against newer gecko * Wed Nov 12 2008 Christopher Aillon - 2.23.2-8 - Rebuild against newer gecko * Wed Sep 24 2008 Christopher Aillon - 2.23.2-7 - Rebuild against newer gecko * Fri Jul 25 2008 - Bastien Nocera - 2.23.2-6 - Add patch to make FLV videos thumbnail (#449279) * Fri Jul 18 2008 Martin Stransky - 2.23.2-5 - Rebuild against xulrunner 1.9.0.1 and fixed gecko dependency * Wed Jun 18 2008 Owen Taylor - 2.23.2-4 - Rebuild against xulrunner 1.9 final * Wed May 7 2008 - Bastien Nocera - 2.23.2-3 - Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD playbackbits -------------------------------------------------------------------------------- References: [ 1 ] Bug #496252 - CVE-2009-1302 Firefox 3 Layout engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496252 [ 2 ] Bug #496253 - CVE-2009-1303 Firefox 2 and 3 Layout engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496253 [ 3 ] Bug #496255 - CVE-2009-1304 Firefox 3 JavaScript engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=496255 [ 4 ] Bug #496256 - CVE-2009-1305 Firefox 2 and 3 JavaScript engine crash https://bugzilla.redhat.com/show_bug.cgi?id=496256 [ 5 ] Bug #486704 - CVE-2009-0652 firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks) https://bugzilla.redhat.com/show_bug.cgi?id=486704 [ 6 ] Bug #496262 - CVE-2009-1306 Firefox jar: scheme ignores the content-disposition: header on the inner URI https://bugzilla.redhat.com/show_bug.cgi?id=496262 [ 7 ] Bug #496263 - CVE-2009-1307 Firefox Same-origin violations when Adobe Flash loaded via view-source: protocol https://bugzilla.redhat.com/show_bug.cgi?id=496263 [ 8 ] Bug #496266 - CVE-2009-1308 Firefox XSS hazard using third-party stylesheets and XBL bindings https://bugzilla.redhat.com/show_bug.cgi?id=496266 [ 9 ] Bug #496267 - CVE-2009-1309 Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString https://bugzilla.redhat.com/show_bug.cgi?id=496267 [ 10 ] Bug #496270 - CVE-2009-1310 Firefox Malicious search plugins can inject code into arbitrary sites https://bugzilla.redhat.com/show_bug.cgi?id=496270 [ 11 ] Bug #496271 - CVE-2009-1311 Firefox POST data sent to wrong site when saving web page with embedded frame https://bugzilla.redhat.com/show_bug.cgi?id=496271 [ 12 ] Bug #496274 - CVE-2009-1312 Firefox allows Refresh header to redirect to javascript: URIs https://bugzilla.redhat.com/show_bug.cgi?id=496274 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update totem' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Update to the new upstream Firefox 3.0.7 / XULRunner 1.9.0.7 fixing multiple security issues: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ This update also contains new builds of all applications depending on Gecko libraries, built against the new version. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-2421 2009-03-08 06:09:09 --------------------------------------------------------------------------------Name : totem Product : Fedora 9 Version : 2.23.2 Release : 12.fc9 URL : https://wiki.gnome.org/Apps Summary : Movie player for GNOME Description : Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation. --------------------------------------------------------------------------------Update Information: Update to the new upstream Firefox 3.0.7 / XULRunner 1.9.0.7 fixing multiple security issues: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ This update also contains new builds of all applications depending on Gecko libraries, built against the new version. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect. --------------------------------------------------------------------------------ChangeLog: * Fri Mar 6 2009 Christopher Aillon - 2.23.2-12 - BuildRequire: gail-devel evolution-data-server-devel * Fri Mar 6 2009 Jan Horak - 2.23.2-11 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 2.23.2-10 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 2.23.2-9 - Rebuild against newer gecko * Wed Nov 12 2008 Christopher Aillon - 2.23.2-8 - Rebuild against newer gecko * Wed Sep 24 2008Christopher Aillon - 2.23.2-7 - Rebuild against newer gecko * Fri Jul 25 2008 - Bastien Nocera - 2.23.2-6 - Add patch to make FLV videos thumbnail (#449279) * Fri Jul 18 2008 Martin Stransky - 2.23.2-5 - Rebuild against xulrunner 1.9.0.1 and fixed gecko dependency * Wed Jun 18 2008 Owen Taylor - 2.23.2-4 - Rebuild against xulrunner 1.9 final * Wed May 7 2008 - Bastien Nocera - 2.23.2-3 - Require gstreamer-plugins-flumpegdemux as used by the DVB and DVD playback bits --------------------------------------------------------------------------------References: [ 1 ] Bug #488272 - CVE-2009-0771 Firefox 3 Layout Engine Crashes https://bugzilla.redhat.com/show_bug.cgi?id=488272 [ 2 ] Bug #488273 - CVE-2009-0772 Firefox 2 and 3 - Layout engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=488273 [ 3 ] Bug #488276 - CVE-2009-0773 Firefox 3 crashes in the JavaScript engine https://bugzilla.redhat.com/show_bug.cgi?id=488276 [ 4 ] Bug #488283 - CVE-2009-0774 Firefox 2 and 3 crashes in the JavaScript engine https://bugzilla.redhat.com/show_bug.cgi?id=488283 [ 5 ] Bug #488287 - CVE-2009-0775 Firefox XUL Linked Clones Double Free Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=488287 [ 6 ] Bug #488290 - CVE-2009-0776 Firefox XML data theft via RDFXMLDataSource and cross-domain redirect https://bugzilla.redhat.com/show_bug.cgi?id=488290 [ 7 ] Bug #488292 - CVE-2009-0777 Firefox URL spoofing with invisible control characters https://bugzilla.redhat.com/show_bug.cgi?id=488292 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update totem' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-494 2005-06-29 ---------------------------------------------------------------------Product : Fedora Core 4 Name : totem Version : 1.0.4 Release : 1 Summary : Movie player for GNOME 2 Description : Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation. ---------------------------------------------------------------------* Wed Jun 29 2005 John (J5) Palmieri - 1.0.4-1 - Update to upstream version 1.0.4 ---------------------------------------------------------------------This update can be downloaded from: 2e511ce19b74ed442fdaa3e9e323548e SRPMS/totem-1.0.4-1.src.rpm 5b978d62261c248c0c16bdfb8a26d4c0 ppc/totem-1.0.4-1.ppc.rpm 2b1ef141c759016b933afc8bed7bb992 ppc/totem-devel-1.0.4-1.ppc.rpm b9f84342e4b51d98ba01c482c33282f4 ppc/debug/totem-debuginfo-1.0.4-1.ppc.rpm 0c2808e6ce9e6edf6cc2e8efefc7a39d x86_64/totem-1.0.4-1.x86_64.rpm c5021d82b8b91d8238b8fbeb8959d56d x86_64/totem-devel-1.0.4-1.x86_64.rpm 02ed5db1d27c55ecd080e365a033d302 x86_64/debug/totem-debuginfo-1.0.4-1.x86_64.rpm 7feadc9adc409279f66e587e8c0d6081 i386/totem-1.0.4-1.i386.rpm 037ff89d7e13eb30416f669e40e3f866 i386/totem-devel-1.0.4-1.i386.rpm 3428e7665b032b6f5084dbcec3357d69 i386/debug/totem-debuginfo-1.0.4-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ----------------------------------------------------------------------- John (J5) Palmieri --fedora-announce-list mailing list
Get the latest Linux and open source security news straight to your inbox.