Fedora alert FEDORA-2010-11361 (sunbird)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 12 Update: sunbird-1.0-0.23.20090916hg.fc12 | |
| Date: | Fri, 23 Jul 2010 02:41:17 +0000 | |
| Message-ID: | <20100723024117.41703111028@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-11361 2010-07-23 01:56:49 -------------------------------------------------------------------------------- Name : sunbird Product : Fedora 12 Version : 1.0 Release : 0.23.20090916hg.fc12 URL : http://www.mozilla.org/projects/calendar/sunbird/ Summary : Calendar application built upon Mozilla toolkit Description : Mozilla Sunbird is a cross-platform calendar application, built upon Mozilla Toolkit. It brings Mozilla-style ease-of-use to your calendar, without tying you to a particular storage solution. -------------------------------------------------------------------------------- Update Information: Update to new upstream Thunderbird version 3.0.6, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.html#thunderbird3.0.5 http://www.mozilla.org/security/known- vulnerabilities/thunderbird30.html#thunderbird3.0.6 Update also includes sunbird package rebuilt against new version of Thunderbird. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 21 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.23.20090916hg - Rebuild against new Thunderbird * Mon Jun 21 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.22.20090916hg - Rebuild against new Thunderbird * Tue Mar 30 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.21.20090916hg - Rebuild against new Thunderbird * Mon Mar 1 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.20.20090916hg - Rebuild against new Thunderbird * Thu Feb 25 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.19.20090916hg - Rebuild against new Thunderbird * Tue Jan 26 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.18.20090916hg - Fixed sunbird exec script * Thu Jan 21 2010 Jan Horak <jhorak@redhat.com> - 1.0-0.17.20090916hg - Rebuild against new Thunderbird * Wed Dec 9 2009 Jan Horak <jhorak@redhat.com> - 1.0-0.16.20090916hg - Rebuild against new Thunderbird * Thu Dec 3 2009 Jan Horak <jhorak@redhat.com> - 1.0-0.15.20090916hg - Rebuild against new Thunderbird * Wed Nov 25 2009 Jan Horak <jhorak@redhat.com> - 1.0-0.14.20090916hg - Rebuild against new Thunderbird * Tue Nov 10 2009 Jan Horak <jhorak@redhat.com> - 1.0-0.13.20090916hg - Rebuild due to Thunderbird update -------------------------------------------------------------------------------- References: [ 1 ] Bug #577029 - CVE-2010-1121 firefox: arbitrary code execution via memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=577029 [ 2 ] Bug #590804 - CVE-2010-1200 Mozilla Crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=590804 [ 3 ] Bug #608108 - CVE-2010-1201 Firefox: Unspecified vulnerability in the browser engine https://bugzilla.redhat.com/show_bug.cgi?id=608108 [ 4 ] Bug #590810 - CVE-2010-1202 Mozilla Crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=590810 [ 5 ] Bug #590830 - CVE-2010-1196 Mozilla Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal https://bugzilla.redhat.com/show_bug.cgi?id=590830 [ 6 ] Bug #590833 - CVE-2010-1199 Mozilla Integer Overflow in XSLT Node Sorting https://bugzilla.redhat.com/show_bug.cgi?id=590833 [ 7 ] Bug #615455 - CVE-2010-1211 Mozilla miscellaneous memory safety hazards https://bugzilla.redhat.com/show_bug.cgi?id=615455 [ 8 ] Bug #615464 - CVE-2010-2752 Mozilla nsCSSValue::Array index integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=615464 [ 9 ] Bug #615466 - CVE-2010-2753 Mozilla nsTreeSelection dangling pointer remote code execution vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=615466 [ 10 ] Bug #608238 - CVE-2010-1205 libpng: out-of-bounds memory write https://bugzilla.redhat.com/show_bug.cgi?id=608238 [ 11 ] Bug #615471 - CVE-2010-1213 Mozilla Cross-origin data disclosure via Web Workers and importScripts https://bugzilla.redhat.com/show_bug.cgi?id=615471 [ 12 ] Bug #568231 - CVE-2010-0654 firefox: cross-domain information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=568231 [ 13 ] Bug #615488 - CVE-2010-2754 Mozilla Cross-origin data leakage from script filename in error messages https://bugzilla.redhat.com/show_bug.cgi?id=615488 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update sunbird' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...