[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-7.fc8

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------

Name        : gnome-web-photo
Product     : Fedora 8
Version     : 0.3
Release     : 7.fc8
URL         : http://ftp.gnome.org/pub/GNOME/sources/gnome-web-photo/0.3/
Summary     : HTML pages thumbnailer
Description :
gnome-web-photo contains a thumbnailer that will be used by GNOME applications,
including the file manager, to generate screenshots of web pages.

--------------------------------------------------------------------------------
Update Information:

Updated firefox packages that fix several security issues are now available for Fedora 8.

This update has been rated as having critical security impact by the Fedora Security Response Team.

Mozilla Firefox is an open source Web browser.

A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)

Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)

A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)

Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 27 2007 Christopher Aillon <caillon at redhat.com> - 0.3-7
- Rebuild against newer gecko
* Tue Nov  6 2007 - Martin Stransky <stransky at redhat.com> - 0.3-6
- Rebuild for new Gecko
* Thu Oct 25 2007 - Bastien Nocera <bnocera at redhat.com> - 0.3-5
- Rebuild for new Gecko, tighten dependencies
--------------------------------------------------------------------------------
Updated packages:

1e17398bb0a11744717e897c21c835ba87430208 gnome-web-photo-0.3-7.fc8.ppc64.rpm
c8da59676fbb4f09728a8c13a812a7208c498798 gnome-web-photo-debuginfo-0.3-7.fc8.ppc64.rpm
f85d80545788f59ab94daa979a72776c7dbcaedc gnome-web-photo-debuginfo-0.3-7.fc8.i386.rpm
850f154f24ef90d19151576aee45732e9c18a8dc gnome-web-photo-0.3-7.fc8.i386.rpm
9f811f781de9eb0d10ee28661ba8588af8615f00 gnome-web-photo-0.3-7.fc8.x86_64.rpm
27892f23d3d39b4328768150f20417a0db055a8e gnome-web-photo-debuginfo-0.3-7.fc8.x86_64.rpm
e0db74feb2ce786781ae7b3c36571e4c96e9dfdd gnome-web-photo-0.3-7.fc8.ppc.rpm
058cd360b309ef91f590dcf21b0afc4f20897eb2 gnome-web-photo-debuginfo-0.3-7.fc8.ppc.rpm
d7fc4625a0b233c12264fa1f35e06ba9e4c5e8fd gnome-web-photo-0.3-7.fc8.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnome-web-photo' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------