--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2009-3099
2009-03-28 00:57:36
--------------------------------------------------------------------------------Name        : xulrunner
Product     : Fedora 9
Version     : 1.9.0.8
Release     : 1.fc9
URL         : Summary     : XUL Runtime for Gecko Applications
Description :
XULRunner provides the XUL Runtime environment for Gecko applications.

--------------------------------------------------------------------------------Update Information:

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL
Runtime environment for Mozilla Firefox.    A memory corruption flaw was
discovered in the way Firefox handles XML files containing an XSLT transform. A
remote attacker could use this flaw to crash Firefox or, potentially, execute
arbitrary code as the user running Firefox. (CVE-2009-1169)    A flaw was
discovered in the way Firefox handles certain XUL garbage collection events. A
remote attacker could use this flaw to crash Firefox or, potentially, execute
arbitrary code as the user running Firefox. (CVE-2009-1044)    This update also
provides depending packages rebuilt against new Firefox version.    Miro updates
to upstream 2.0.3.  Provides new features and fixes various bugs in 1.2.x series
--------------------------------------------------------------------------------ChangeLog:

* Fri Mar 27 2009 Christopher Aillon  - 1.9.0.8-1
- Update to 1.9.0.8
* Tue Mar  3 2009 Jan Horak  - 1.9.0.7-1
- Update to 1.9.0.7
* Thu Feb 26 2009 Jan Horak  - 1.9.0.6-2
- Fixed wrong version of Firefox when loading 'about:' as location 
  (#453980).
* Wed Feb  4 2009 Christopher Aillon  1.9.0.6-1
- Update to 1.9.0.6
* Tue Dec 16 2008 Christopher Aillon  1.9.0.5-1
- Update to 1.9.0.5
* Wed Nov 12 2008 Christopher Aillon  1.9.0.4-1
- Update to 1.9.0.4
* Tue Sep 23 2008 Christopher Aillon  1.9.0.2-1
- Update to 1.9.0.2
* Wed Jul 16 2008 Christopher Aillon  1.9.0.1-1
- Update to 1.9.0.1
* Mon Jun 30 2008 Dennis Gilmore  1.9-1.1
- handle sparc arches
* Tue Jun 17 2008 Christopher Aillon  1.9-1
- Update to 1.9 final
* Thu May 29 2008 Christopher Aillon  1.9-0.63
- Simplify PS/PDF operators
* Thu May 22 2008 Christopher Aillon  1.9-0.62
- Upstream patch to fsync() less
* Thu May  8 2008 Colin Walters  1.9-0.61
- Ensure we enable startup notification; add BR and modify config
  (bug #445543)
--------------------------------------------------------------------------------This update can be installed with the "yum" update program.  Use 
su -c 'yum update xulrunner' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora 9 Update: xulrunner-1.9.0.8-1.fc9

March 28, 2009
Mozilla Firefox is an open source Web browser

Summary

XULRunner provides the XUL Runtime environment for Gecko applications.

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL

Runtime environment for Mozilla Firefox. A memory corruption flaw was

discovered in the way Firefox handles XML files containing an XSLT transform. A

remote attacker could use this flaw to crash Firefox or, potentially, execute

arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was

discovered in the way Firefox handles certain XUL garbage collection events. A

remote attacker could use this flaw to crash Firefox or, potentially, execute

arbitrary code as the user running Firefox. (CVE-2009-1044) This update also

provides depending packages rebuilt against new Firefox version. Miro updates

to upstream 2.0.3. Provides new features and fixes various bugs in 1.2.x series

* Fri Mar 27 2009 Christopher Aillon - 1.9.0.8-1

- Update to 1.9.0.8

* Tue Mar 3 2009 Jan Horak - 1.9.0.7-1

- Update to 1.9.0.7

* Thu Feb 26 2009 Jan Horak - 1.9.0.6-2

- Fixed wrong version of Firefox when loading 'about:' as location

(#453980).

* Wed Feb 4 2009 Christopher Aillon 1.9.0.6-1

- Update to 1.9.0.6

* Tue Dec 16 2008 Christopher Aillon 1.9.0.5-1

- Update to 1.9.0.5

* Wed Nov 12 2008 Christopher Aillon 1.9.0.4-1

- Update to 1.9.0.4

* Tue Sep 23 2008 Christopher Aillon 1.9.0.2-1

- Update to 1.9.0.2

* Wed Jul 16 2008 Christopher Aillon 1.9.0.1-1

- Update to 1.9.0.1

* Mon Jun 30 2008 Dennis Gilmore 1.9-1.1

- handle sparc arches

* Tue Jun 17 2008 Christopher Aillon 1.9-1

- Update to 1.9 final

* Thu May 29 2008 Christopher Aillon 1.9-0.63

- Simplify PS/PDF operators

* Thu May 22 2008 Christopher Aillon 1.9-0.62

- Upstream patch to fsync() less

* Thu May 8 2008 Colin Walters 1.9-0.61

- Ensure we enable startup notification; add BR and modify config

(bug #445543)

su -c 'yum update xulrunner' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2009-3099 2009-03-28 00:57:36 Product : Fedora 9 Version : 1.9.0.8 Release : 1.fc9 URL : Summary : XUL Runtime for Gecko Applications Description : XULRunner provides the XUL Runtime environment for Gecko applications. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044) This update also provides depending packages rebuilt against new Firefox version. Miro updates to upstream 2.0.3. Provides new features and fixes various bugs in 1.2.x series * Fri Mar 27 2009 Christopher Aillon - 1.9.0.8-1 - Update to 1.9.0.8 * Tue Mar 3 2009 Jan Horak - 1.9.0.7-1 - Update to 1.9.0.7 * Thu Feb 26 2009 Jan Horak - 1.9.0.6-2 - Fixed wrong version of Firefox when loading 'about:' as location (#453980). * Wed Feb 4 2009 Christopher Aillon 1.9.0.6-1 - Update to 1.9.0.6 * Tue Dec 16 2008 Christopher Aillon 1.9.0.5-1 - Update to 1.9.0.5 * Wed Nov 12 2008 Christopher Aillon 1.9.0.4-1 - Update to 1.9.0.4 * Tue Sep 23 2008 Christopher Aillon 1.9.0.2-1 - Update to 1.9.0.2 * Wed Jul 16 2008 Christopher Aillon 1.9.0.1-1 - Update to 1.9.0.1 * Mon Jun 30 2008 Dennis Gilmore 1.9-1.1 - handle sparc arches * Tue Jun 17 2008 Christopher Aillon 1.9-1 - Update to 1.9 final * Thu May 29 2008 Christopher Aillon 1.9-0.63 - Simplify PS/PDF operators * Thu May 22 2008 Christopher Aillon 1.9-0.62 - Upstream patch to fsync() less * Thu May 8 2008 Colin Walters 1.9-0.61 - Ensure we enable startup notification; add BR and modify config (bug #445543) su -c 'yum update xulrunner' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce

Change Log

References

Update Instructions

Severity
Product : Fedora 9
Version : 1.9.0.8
Release : 1.fc9
URL : Summary : XUL Runtime for Gecko Applications

Related News