--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2009-1399
2009-02-06 04:16:47
--------------------------------------------------------------------------------Name        : gnome-web-photo
Product     : Fedora 9
Version     : 0.3
Release     : 17.fc9
URL         : https://download.gnome.org/sources/gnome-web-photo/0.3/
Summary     : HTML pages thumbnailer
Description :
gnome-web-photo contains a thumbnailer that will be used by GNOME applications,
including the file manager, to generate screenshots of web pages.

--------------------------------------------------------------------------------Update Information:

Update to the new upstream Firefox 3.0.6 / XULRunner 1.9.0.6 fixing multiple
security issues:  https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/    This update also contains new
builds of all applications depending on Gecko libraries, built against the new
version.    Note: after the updated packages are installed, Firefox must be
restarted for the update to take effect.
--------------------------------------------------------------------------------ChangeLog:

* Wed Feb  4 2009 Christopher Aillon  - 0.3-17
- Rebuild against newer gecko
* Wed Dec 17 2008 Christopher Aillon  - 0.3-16
- Rebuild against newer gecko
* Wed Nov 12 2008 Christopher Aillon  - 0.3-15
- Rebuild against newer gecko
* Wed Sep 24 2008 Christopher Aillon  - 0.3-14
- Rebuild against newer gecko
* Mon Jul 21 2008 Martin Stransky  - 0.3-13
- Rebuild against new xulrunner
* Fri Jun 20 2008 Martin Stransky  - 0.3-12
- Rebuild against new xulrunner
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #483141 - CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption
        https://bugzilla.redhat.com/show_bug.cgi?id=483141
  [ 2 ] Bug #483143 - CVE-2009-0355 Firefox local file stealing with SessionStore
        https://bugzilla.redhat.com/show_bug.cgi?id=483143
  [ 3 ] Bug #483145 - CVE-2009-0357 Firefox XMLHttpRequest allows reading HTTPOnly cookies
        https://bugzilla.redhat.com/show_bug.cgi?id=483145
  [ 4 ] Bug #483139 - CVE-2009-0352 Firefox layout crashes with evidence of memory corruption
        https://bugzilla.redhat.com/show_bug.cgi?id=483139
  [ 5 ] Bug #483142 - CVE-2009-0354 Firefox XSS using a chrome XBL method and window.eval
        https://bugzilla.redhat.com/show_bug.cgi?id=483142
  [ 6 ] Bug #483144 - CVE-2009-0356 Firefox Chrome privilege escalation via local .desktop files
        https://bugzilla.redhat.com/show_bug.cgi?id=483144
  [ 7 ] Bug #483150 - CVE-2009-0358 Firefox directives to not cache pages ignored
        https://bugzilla.redhat.com/show_bug.cgi?id=483150
--------------------------------------------------------------------------------This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnome-web-photo' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora 9 Update: gnome-web-photo-0.3-17.fc9

February 6, 2009
Update to the new upstream Firefox 3.0.6 / XULRunner 1.9.0.6 fixing multiple security issues.

Summary

gnome-web-photo contains a thumbnailer that will be used by GNOME applications,

including the file manager, to generate screenshots of web pages.

Update to the new upstream Firefox 3.0.6 / XULRunner 1.9.0.6 fixing multiple

security issues: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ This update also contains new

builds of all applications depending on Gecko libraries, built against the new

version. Note: after the updated packages are installed, Firefox must be

restarted for the update to take effect.

* Wed Feb 4 2009 Christopher Aillon - 0.3-17

- Rebuild against newer gecko

* Wed Dec 17 2008 Christopher Aillon - 0.3-16

- Rebuild against newer gecko

* Wed Nov 12 2008 Christopher Aillon - 0.3-15

- Rebuild against newer gecko

* Wed Sep 24 2008 Christopher Aillon - 0.3-14

- Rebuild against newer gecko

* Mon Jul 21 2008 Martin Stransky - 0.3-13

- Rebuild against new xulrunner

* Fri Jun 20 2008 Martin Stransky - 0.3-12

- Rebuild against new xulrunner

[ 1 ] Bug #483141 - CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption

https://bugzilla.redhat.com/show_bug.cgi?id=483141

[ 2 ] Bug #483143 - CVE-2009-0355 Firefox local file stealing with SessionStore

https://bugzilla.redhat.com/show_bug.cgi?id=483143

[ 3 ] Bug #483145 - CVE-2009-0357 Firefox XMLHttpRequest allows reading HTTPOnly cookies

https://bugzilla.redhat.com/show_bug.cgi?id=483145

[ 4 ] Bug #483139 - CVE-2009-0352 Firefox layout crashes with evidence of memory corruption

https://bugzilla.redhat.com/show_bug.cgi?id=483139

[ 5 ] Bug #483142 - CVE-2009-0354 Firefox XSS using a chrome XBL method and window.eval

https://bugzilla.redhat.com/show_bug.cgi?id=483142

[ 6 ] Bug #483144 - CVE-2009-0356 Firefox Chrome privilege escalation via local .desktop files

https://bugzilla.redhat.com/show_bug.cgi?id=483144

[ 7 ] Bug #483150 - CVE-2009-0358 Firefox directives to not cache pages ignored

https://bugzilla.redhat.com/show_bug.cgi?id=483150

su -c 'yum update gnome-web-photo' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2009-1399 2009-02-06 04:16:47 Product : Fedora 9 Version : 0.3 Release : 17.fc9 URL : https://download.gnome.org/sources/gnome-web-photo/0.3/ Summary : HTML pages thumbnailer Description : gnome-web-photo contains a thumbnailer that will be used by GNOME applications, including the file manager, to generate screenshots of web pages. Update to the new upstream Firefox 3.0.6 / XULRunner 1.9.0.6 fixing multiple security issues: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/ This update also contains new builds of all applications depending on Gecko libraries, built against the new version. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect. * Wed Feb 4 2009 Christopher Aillon - 0.3-17 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon - 0.3-16 - Rebuild against newer gecko * Wed Nov 12 2008 Christopher Aillon - 0.3-15 - Rebuild against newer gecko * Wed Sep 24 2008 Christopher Aillon - 0.3-14 - Rebuild against newer gecko * Mon Jul 21 2008 Martin Stransky - 0.3-13 - Rebuild against new xulrunner * Fri Jun 20 2008 Martin Stransky - 0.3-12 - Rebuild against new xulrunner [ 1 ] Bug #483141 - CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483141 [ 2 ] Bug #483143 - CVE-2009-0355 Firefox local file stealing with SessionStore https://bugzilla.redhat.com/show_bug.cgi?id=483143 [ 3 ] Bug #483145 - CVE-2009-0357 Firefox XMLHttpRequest allows reading HTTPOnly cookies https://bugzilla.redhat.com/show_bug.cgi?id=483145 [ 4 ] Bug #483139 - CVE-2009-0352 Firefox layout crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483139 [ 5 ] Bug #483142 - CVE-2009-0354 Firefox XSS using a chrome XBL method and window.eval https://bugzilla.redhat.com/show_bug.cgi?id=483142 [ 6 ] Bug #483144 - CVE-2009-0356 Firefox Chrome privilege escalation via local .desktop files https://bugzilla.redhat.com/show_bug.cgi?id=483144 [ 7 ] Bug #483150 - CVE-2009-0358 Firefox directives to not cache pages ignored https://bugzilla.redhat.com/show_bug.cgi?id=483150 su -c 'yum update gnome-web-photo' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce

Change Log

References

Update Instructions

Severity
Product : Fedora 9
Version : 0.3
Release : 17.fc9
URL : https://download.gnome.org/sources/gnome-web-photo/0.3/
Summary : HTML pages thumbnailer

Related News