LWN.net Logo

Fedora alert FEDORA-2009-1398 (google-gadgets)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 10 Update: google-gadgets-0.10.5-2.fc10
Date:  Fri, 06 Feb 2009 05:21:19 +0000
Message-ID:  <20090206052119.B524A20860E@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-1398 2009-02-06 04:16:47 -------------------------------------------------------------------------------- Name : google-gadgets Product : Fedora 10 Version : 0.10.5 Release : 2.fc10 URL : http://code.google.com/p/google-gadgets-for-linux/ Summary : Google Gadgets for Linux Description : Google Gadgets for Linux provides a platform for running desktop gadgets under Linux, catering to the unique needs of Linux users. It can run, without modification, many Google Desktop gadgets as well as the Universal Gadgets on iGoogle. -------------------------------------------------------------------------------- Update Information: Update to the new upstream Firefox 3.0.6 / XULRunner 1.9.0.6 fixing multiple security issues: http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.6 This update also contains new builds of all applications depending on Gecko libraries, built against the new version, including the latest google gadgets upstream release. See http://code.google.com/p/google-gadgets-for- linux/source/browse/trunk/ChangeLog?spec=svn1087&r=1087 for details. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 4 2009 Christopher Aillon <caillon@redhat.com> - 0.10.5-2 - Rebuild against newer gecko * Wed Jan 14 2009 Rex Dieter <rdieter@fedoraproject.org> - 0.10.5-1 - 0.10.5, req'd by kde * Tue Dec 30 2008 Michel Salim <salimma@fedoraproject.org> - 0.10.4-2 - BR: Network-Manager-devel, startup-notification-devel - Pass the browser plugin directory to ./configure - Move designer desktop entry to -gtk subpackage * Sat Dec 20 2008 Rex Dieter <rdieter@fedoraproject.org> - 0.10.4-1 - Update to 0.10.4 (#477251) - -devel: Requires: %name-gtk %name-qt (devel symlinks) - BR: pkgconfig (automatic pkgconfig deps) * Sun Nov 23 2008 Michel Salim <salimma@fedoraproject.org> - 0.10.3-1 - Update to 0.10.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #483139 - CVE-2009-0352 Firefox layout crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483139 [ 2 ] Bug #483142 - CVE-2009-0354 Firefox XSS using a chrome XBL method and window.eval https://bugzilla.redhat.com/show_bug.cgi?id=483142 [ 3 ] Bug #483143 - CVE-2009-0355 Firefox local file stealing with SessionStore https://bugzilla.redhat.com/show_bug.cgi?id=483143 [ 4 ] Bug #483150 - CVE-2009-0358 Firefox directives to not cache pages ignored https://bugzilla.redhat.com/show_bug.cgi?id=483150 [ 5 ] Bug #483141 - CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483141 [ 6 ] Bug #483144 - CVE-2009-0356 Firefox Chrome privilege escalation via local .desktop files https://bugzilla.redhat.com/show_bug.cgi?id=483144 [ 7 ] Bug #483145 - CVE-2009-0357 Firefox XMLHttpRequest allows reading HTTPOnly cookies https://bugzilla.redhat.com/show_bug.cgi?id=483145 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update google-gadgets' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds