Clanless Fun

release notes:

• MFSA 2007-25 XPCNativeWrapper pollution
• MFSA 2007-24 Unauthorized access to wyciwyg:// documents
• MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer
• MFSA 2007-22 File type confusion due to %00 in name
• MFSA 2007-21 Privilege escallation using an event handler attached to an element not in the document
• MFSA 2007-20 Frame spoofing while window is loading
• MFSA 2007-19 XSS using addEventListener and setTimeout
• MFSA 2007-18 Crashes with evidence of memory corruption

Download Firefox v2.0.0.5

VLC media player is a portable multimedia player for various audio and video formats (MPEG-1, MPEG-2, MPEG-4, DivX, mp3, ogg, etc) as well as DVDs, VCDs, and streaming protocols. With this baby there is no need for additional codecs.

Change-list:

VLC media player versions 0.8.6b and lower suffer from a security vulnerability in the CDDA, Vorbis, Theora and SAP plugins. More technical details are available in our advisory. An updated release of VLC is available which includes a few other fixes as well. We strongly recommend all users to update to this new version.

Various bugfixes, notably:

* Windows Vista compatibility
* Cropping in Direct3D
* Fullscreen change crash on Mac OS X
* RSS filter string overflow
* Few memory leaks
* MKV demuxer crash (related to seeking)

CDDA / Vorbis / Theora / SAP plugins:

* Security updates (VideoLAN-SA-0702)

Demuxers:

* Fixed a problem with detecting embedded subtitles (GAB2 format) in AVI

Decoders:

* Updated FLAC API compatibility

Input:

* Support for new v4l2 encoder API

New localisation:

* Arabic
* Persian

Download here

release notes:

• MFSA 2007-17 - XUL Popup Spoofing (low)
• MFSA 2007-16 - XSS using addEventListener (high)
• MFSA 2007-14 - Path Abuse in Cookies (low)
• MFSA 2007-13 - Persistent Autocomplete Denial of Service (low)
• MFSA 2007-12 - Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4) (critical)

Download Firefox v2.0.0.4

Skype version 3.2.0.158 release notes:

• feature: Getting Started Wizard improvement
• bugfix: Installer error 1603
• bugfix: Sound setting not saved on Vista
• bugfix: Accessibility problems with screen readers resolved
• bugfix: Delay when playing notification sounds
• bugfix: Incoming call is not sent to Voicemail if user rejects it
• bugfix: On some rare cases conference call participants were muted
• bugfix: Skype crashes sometimes when ending a call
• bugfix: NTLM proxy authentication did not work
• bugfix API: App2App transfers did not work as expected
• Language files updated

Skype Website