-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-3962 2007-11-29 01:46:57.290638 --------------------------------------------------------------------------------
Name : gnome-web-photo Product : Fedora 8 Version : 0.3 Release : 7.fc8 URL : http://ftp.gnome.org/pub/GNOME/sources/gnome-web-photo/0.3/ Summary : HTML pages thumbnailer Description : gnome-web-photo contains a thumbnailer that will be used by GNOME applications, including the file manager, to generate screenshots of web pages. -------------------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security issues are now available for Fedora 8. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947) Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959) A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960) Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 27 2007 Christopher Aillon <[EMAIL PROTECTED]> - 0.3-7 - Rebuild against newer gecko * Tue Nov 6 2007 - Martin Stransky <[EMAIL PROTECTED]> - 0.3-6 - Rebuild for new Gecko * Thu Oct 25 2007 - Bastien Nocera <[EMAIL PROTECTED]> - 0.3-5 - Rebuild for new Gecko, tighten dependencies -------------------------------------------------------------------------------- Updated packages: 1e17398bb0a11744717e897c21c835ba87430208 gnome-web-photo-0.3-7.fc8.ppc64.rpm c8da59676fbb4f09728a8c13a812a7208c498798 gnome-web-photo-debuginfo-0.3-7.fc8.ppc64.rpm f85d80545788f59ab94daa979a72776c7dbcaedc gnome-web-photo-debuginfo-0.3-7.fc8.i386.rpm 850f154f24ef90d19151576aee45732e9c18a8dc gnome-web-photo-0.3-7.fc8.i386.rpm 9f811f781de9eb0d10ee28661ba8588af8615f00 gnome-web-photo-0.3-7.fc8.x86_64.rpm 27892f23d3d39b4328768150f20417a0db055a8e gnome-web-photo-debuginfo-0.3-7.fc8.x86_64.rpm e0db74feb2ce786781ae7b3c36571e4c96e9dfdd gnome-web-photo-0.3-7.fc8.ppc.rpm 058cd360b309ef91f590dcf21b0afc4f20897eb2 gnome-web-photo-debuginfo-0.3-7.fc8.ppc.rpm d7fc4625a0b233c12264fa1f35e06ba9e4c5e8fd gnome-web-photo-0.3-7.fc8.src.rpm This update can be installed with the "yum" update program. Use su -c 'yum update gnome-web-photo' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce