U radu programskog paketa Gnome-shell uočeno je više sigurnosnih propusta koje udaljeni napadač može iskoristiti za neovlašteni pristup i promjenu osjetljivih podataka, proizvoljno izvršavanje programskog koda i DoS (eng. Denial of Service) napad.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8627
2011-06-24 02:47:06
--------------------------------------------------------------------------------

Name        : gnome-shell
Product     : Fedora 15
Version     : 3.0.2
Release     : 3.fc15
URL         : http://live.gnome.org/GnomeShell
Summary     : Window management and application launching for GNOME
Description :
GNOME Shell provides core user interface functions for the GNOME 3 desktop,
like switching to windows and launching applications. GNOME Shell takes
advantage of the capabilities of modern graphics hardware and introduces
innovative user interface concepts to provide a visually attractive and
easy to use experience.

--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 5.0, fixing multiple security issues
detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox.html#firefox5

See upstream release notes for more information about this new version:

* http://www.mozilla.com/en-US/firefox/5.0/releasenotes/

This update ALSO contains a change to the GNOME 3 shell's gjs library, to make
it use the standalone js package, to reduce risk of regression.

It also includes all packages depending on gecko-libs rebuilt against the new
version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 Colin Walters <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-3
- Add versioned dep on gjs
* Thu Jun 23 2011 Colin Walters <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-2
- Rebuild against latest gjs; should drop mozjs.so dependency
* Wed May 25 2011 Owen Taylor <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.0.2-1
- Update to 3.0.2
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #676437 - Build gjs against the standalone SpiderMonkey package
'js', not XULRunner's copy
        https://bugzilla.redhat.com/show_bug.cgi?id=676437
  [ 2 ] Bug #715188 - Update to Firefox 5.0
        https://bugzilla.redhat.com/show_bug.cgi?id=715188
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnome-shell' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce