Uočene su višestruke sigurnosne ranjivosti u radu programskog paketa Galeon. Uspješna zlouporaba napadaču omogućuje izvođenje DoS napada, pokretanje proizvoljnog programskog koda, zaobilaženje pojedinih ograničenja te dobivanje većih ovlasti.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-11084
2011-08-18 01:38:35
--------------------------------------------------------------------------------

Name        : galeon
Product     : Fedora 14
Version     : 2.0.7
Release     : 42.fc14.1
URL         : http://galeon.sourceforge.net/
Summary     : GNOME2 Web browser based on Mozilla
Description :
Galeon is a web browser built around Gecko (Mozilla's rendering
engine) and Necko (Mozilla's networking engine). It's a GNOME web
browser, designed to take advantage of as many GNOME technologies as
makes sense. Galeon was written to do just one thing - browse the web.

--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.20 and Thunderbird version 3.1.12,
fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/announce/2011/mfsa2011-30.html
* http://www.mozilla.org/security/announce/2011/mfsa2011-32.html

This update also includes all packages depending on gecko-libs rebuilt against
the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Aug 17 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-42.1
- Rebuild against newer gecko
* Tue Jun 21 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-41.1
- Rebuild against newer gecko
* Thu Apr 28 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-40.1
- Rebuild against newer gecko
* Tue Mar 22 2011 Christopher Aillon <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-39.1
- Rebuild against newer gecko
* Tue Mar  8 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-38.1
- Rebuild against newer gecko
* Tue Mar  1 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-37.1
- Rebuild against newer gecko
* Thu Dec  9 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-36.1
- Rebuild against newer gecko
* Thu Oct 28 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-35.1
- Rebuild against newer gecko
* Tue Oct 19 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-34.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update galeon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce