U radu programskog paketa Galeon uočeno je i ispravljeno više sigurnosnih propusta. Udaljeni napadač ih je mogao iskoristiti za napad uskraćivanjem usluga (DoS), proizvoljno pokretanje programskog koda te XSS napad (umetanje HTML i skriptnog koda).

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-13467
2011-09-29 01:06:30
--------------------------------------------------------------------------------

Name        : galeon
Product     : Fedora 14
Version     : 2.0.7
Release     : 44.fc14.1
URL         : http://galeon.sourceforge.net/
Summary     : GNOME2 Web browser based on Mozilla
Description :
Galeon is a web browser built around Gecko (Mozilla's rendering
engine) and Necko (Mozilla's networking engine). It's a GNOME web
browser, designed to take advantage of as many GNOME technologies as
makes sense. Galeon was written to do just one thing - browse the web.

--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.23, fixing multiple security issues
detailed in the upstream advisories:

*
http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.23

This update also includes all packages depending on gecko-libs rebuilt against
the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Sep 27 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-44.1
- Rebuild against newer gecko
* Tue Sep  6 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-43.1
- Rebuild against newer gecko
* Wed Aug 17 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-42.1
- Rebuild against newer gecko
* Tue Jun 21 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-41.1
- Rebuild against newer gecko
* Thu Apr 28 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-40.1
- Rebuild against newer gecko
* Tue Mar 22 2011 Christopher Aillon <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-39.1
- Rebuild against newer gecko
* Tue Mar  8 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-38.1
- Rebuild against newer gecko
* Tue Mar  1 2011 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-37.1
- Rebuild against newer gecko
* Thu Dec  9 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-36.1
- Rebuild against newer gecko
* Thu Oct 28 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-35.1
- Rebuild against newer gecko
* Tue Oct 19 2010 Jan Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.0.7-34.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update galeon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce