mozilla security updated (proposed) needs testing.
Please, test the mozilla suite I just uploaded (2:1.7.8-1sarge7). Keep your
eyes open regressions and especially if it breaks any dependents or extensions.
You can grab it from here:
http://people.debian.org/~asac/security/
The changes are:
mozilla (2:1.7.8-1sarge7) stable-security; urgency=critical
- added mozilla 1.7.14 patches in debian/patches that fix various
security issues:
+ CVE-2006-2787 : 1_0001-mfsa2006-31-319263-336601-336313.txt
+ CVE-2006-2786 1/2 : 1_0002-mfsa2006-33-Part-1-2-329746.txt
+ CVE-2006-2786 2/2 : 1_0003-mfsa2006-33-Part-2-2-330214.txt
+ CVE-2006-2785 2/2 : 1_0004-mfsa2006-34-Part2-2-329521-suite.txt
+ CVE-2006-2775 : 1_0005-mfsa2006-35-329677.txt
+ CVE-2006-2784 : 1_0006-mfsa2006-36-330037.txt
+ CVE-2006-2776 : 1_0007-mfsa2006-37-330773-with-belt-and-braces.txt
+ CVE-2006-2778 : 1_0008-mfsa2006-38-330897.txt
+ CVE-2006-1942 : 1_0009-mfsa2006-39-CVE-2006-1942-334341-suite.txt
+ CVE-2006-2781 : 1_0010-mfsa2006-40-334384.txt
+ CVE-2006-2782 : 1_0011-mfsa2006-41-334977.txt
+ CVE-2006-2783 : 1_0012-mfsa2006-42-335816.txt
+ CVE-2006-2777 : 1_0013-mfsa2006-43-336830.txt
+ CVE-2006-2779 3/6 : 1_0014-mfsa2006-32-Part-3-7-326501.txt
+ CVE-2006-2779 4/6 : 1_0015-mfsa2006-32-Part-4a-7-326931.txt
+ CVE-2006-2785 2/2 : 1_0015-mfsa2006-34-Part-1-2-xpfe-329468-suite.txt
+ CVE-2006-2779 4/6 : 1_0016-mfsa2006-32-Part-4b-7-329219.txt
+ CVE-2006-2779 4/6 : 1_0017-mfsa2006-32-Part-4c-7-330818-proper-aviary.txt
+ CVE-2006-2779 6/6 : 1_0018-mfsa2006-32-Part-6-7-332971.txt
+ CVE-2006-2780 : 1_0019-js-src-jsstr.c-335535-mfsa2006-32-Part-7-7.txt
+ CVE-2006-2779 5/6 : 1_0021-mfsa2006-32-Part-5-7-327712.txt
- Note: CVE-2006-2779 (mfsa2006-32) is only partially fixed. Missing are
tricky parts 1/6 and 2/6 from advisory:
1/6: Removing nested <option>s from a select (Jesse Ruderman)
https://bugzilla.mozilla.org/show_bug.cgi?id=324918
2/Crashes during DOMNodeRemoved mutation
https://bugzilla.mozilla.org/show_bug.cgi?id=325730
https://bugzilla.mozilla.org/show_bug.cgi?id=329982event6:
- Alexander
--
GPG messages preferred. | .''`. ** Debian GNU/Linux **
Alexander Sack | : :' : The universal
asac@jwsdot.com | `. `' Operating System
http://www.asoftsite.org | `- http://www.debian.org
Reply to: