diff options
| author | ghen <ghen@pkgsrc.org> | 2008-07-02 09:03:35 +0000 |
|---|---|---|
| committer | ghen <ghen@pkgsrc.org> | 2008-07-02 09:03:35 +0000 |
| commit | 4f2e9d5b4ca47f4a4123b3a6b46b5ec1a8484c92 (patch) | |
| tree | fc1248988763da5d41bff95446441ae126e91f88 /net | |
| parent | c636d771ee8dba66afb84e980f27891acb28ebf5 (diff) | |
| download | pkgsrc-4f2e9d5b4ca47f4a4123b3a6b46b5ec1a8484c92.tar.gz | |
Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.15.
Part of patch-af has been fixed upstream.
Security fixes in this version:
MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-32 Remote site run as local file via Windows URL shortcut
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-30 File location URL in directory listings not escaped properly
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-23 Signed JAR tampering
MFSA 2008-22 XSS through JavaScript same-origin violation
MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.15/releasenotes/
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions