--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10981
2009-11-04 10:56:11
--------------------------------------------------------------------------------

Name        : blam
Product     : Fedora 10
Version     : 1.8.5
Release     : 15.fc10
URL         : http://www.cmartin.tk/blam.html
Summary     : An RSS/RDF feed reader
Description :
Blam is a tool that helps you keep track of the growing
number of news feeds distributed as RSS. Blam lets you
subscribe to any number of feeds and provides an easy to
use and clean interface to stay up to date

--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.0.15, fixing multiple security issues
detailed in the upstream advisories:    https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/    Update also includes all
packages depending on gecko-libs rebuilt against new version of Firefox /
XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 27 2009 Jan Horak  - 1.8.5-15
- Rebuild against newer gecko
* Wed Sep  9 2009 Jan Horak  - 1.8.5-14
- Rebuild against newer gecko
* Tue Aug  4 2009 Jan Horak  - 1.8.5-13
- Rebuild against newer gecko
* Tue Jul 21 2009 Jan Horak  - 1.8.5-12
- Rebuild against newer gecko
* Thu Jun 11 2009 Christopher Aillon  - 1.8.5-11
- Rebuild against newer gecko
* Mon Apr 27 2009 Christopher Aillon  - 1.8.5-10
- Rebuild against newer gecko
* Tue Apr 21 2009 Christopher Aillon  - 1.8.5-9
- Rebuild against newer gecko
* Fri Mar 27 2009 Christopher Aillon  - 1.8.5-8
- Rebuild against newer gecko
* Fri Mar  6 2009 Jan Horak  - 1.8.5-7
- Rebuild against newer gecko
* Wed Feb  4 2009 Christopher Aillon  - 1.8.5-6
- Rebuild against newer gecko
* Wed Dec 17 2008 Christopher Aillon  - 1.8.5-5
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption
        https://bugzilla.redhat.com/show_bug.cgi?id=530567
  [ 2 ] Bug #530569 - CVE-2009-3382 Firefox crashes with evidence of memory corruption
        https://bugzilla.redhat.com/show_bug.cgi?id=530569
  [ 3 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override
        https://bugzilla.redhat.com/show_bug.cgi?id=530168
  [ 4 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()
        https://bugzilla.redhat.com/show_bug.cgi?id=530167
  [ 5 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion
        https://bugzilla.redhat.com/show_bug.cgi?id=530162
  [ 6 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()
        https://bugzilla.redhat.com/show_bug.cgi?id=530157
  [ 7 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser
        https://bugzilla.redhat.com/show_bug.cgi?id=530156
  [ 8 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing
        https://bugzilla.redhat.com/show_bug.cgi?id=530155
  [ 9 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use
        https://bugzilla.redhat.com/show_bug.cgi?id=524815
  [ 10 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing
        https://bugzilla.redhat.com/show_bug.cgi?id=530151
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update blam' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora 10 Update: blam-1.8.5-15.fc10

November 4, 2009
Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities...

Summary

Blam is a tool that helps you keep track of the growing

number of news feeds distributed as RSS. Blam lets you

subscribe to any number of feeds and provides an easy to

use and clean interface to stay up to date

Update Information:

Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

Change Log

* Tue Oct 27 2009 Jan Horak - 1.8.5-15 - Rebuild against newer gecko * Wed Sep 9 2009 Jan Horak - 1.8.5-14 - Rebuild against newer gecko * Tue Aug 4 2009 Jan Horak - 1.8.5-13 - Rebuild against newer gecko * Tue Jul 21 2009 Jan Horak - 1.8.5-12 - Rebuild against newer gecko * Thu Jun 11 2009 Christopher Aillon - 1.8.5-11 - Rebuild against newer gecko * Mon Apr 27 2009 Christopher Aillon - 1.8.5-10 - Rebuild against newer gecko * Tue Apr 21 2009 Christopher Aillon - 1.8.5-9 - Rebuild against newer gecko * Fri Mar 27 2009 Christopher Aillon - 1.8.5-8 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 1.8.5-7 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 1.8.5-6 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 1.8.5-5 - Rebuild against newer gecko

References

[ 1 ] Bug #530567 - CVE-2009-3380 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530567 [ 2 ] Bug #530569 - CVE-2009-3382 Firefox crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=530569 [ 3 ] Bug #530168 - CVE-2009-3376 Firefox download filename spoofing with RTL override https://bugzilla.redhat.com/show_bug.cgi?id=530168 [ 4 ] Bug #530167 - CVE-2009-3375 Firefox cross-origin data theft through document.getSelection() https://bugzilla.redhat.com/show_bug.cgi?id=530167 [ 5 ] Bug #530162 - CVE-2009-1563 Firefox heap buffer overflow in string to number conversion https://bugzilla.redhat.com/show_bug.cgi?id=530162 [ 6 ] Bug #530157 - CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS() https://bugzilla.redhat.com/show_bug.cgi?id=530157 [ 7 ] Bug #530156 - CVE-2009-3373 Firefox heap buffer overflow in GIF color map parser https://bugzilla.redhat.com/show_bug.cgi?id=530156 [ 8 ] Bug #530155 - CVE-2009-3372 Firefox crash in proxy auto-configuration regexp parsing https://bugzilla.redhat.com/show_bug.cgi?id=530155 [ 9 ] Bug #524815 - CVE-2009-3274 Firefox: Predictable /tmp pathname use https://bugzilla.redhat.com/show_bug.cgi?id=524815 [ 10 ] Bug #530151 - CVE-2009-3370 Firefox form history vulnerable to stealing https://bugzilla.redhat.com/show_bug.cgi?id=530151

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update blam' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : blam
Product : Fedora 10
Version : 1.8.5
Release : 15.fc10
URL : http://www.cmartin.tk/blam.html
Summary : An RSS/RDF feed reader

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software
2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns
22.Lock ScreenEffect Esm H320
2 - 3 min read
Red Hat recently released its newest enterprise Linux distro, Red Hat Enterprise Linux (RHEL) 9.4 , which introduces several features designed to
8.Locks HexConnections CodeGlobe Esm H320
1 - 2 min read
The latest release of Debian , one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and
20.Lock AbstractDigital Circular Esm H320
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server. The vulnerabilities affected
1.Penguin Landscape Esm H320
1 - 2 min read
A critical vulnerability was discovered in the Linux kernel's netfilter subsystem, specifically within the nf_tables component, posing potential
19.Laptop Bed Esm H320
2 - 3 min read
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary
23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved