firefox 1.5.dfsg+1.5.0.14~prepatch071011b-0ubuntu1 source package in Ubuntu

Changelog

firefox (1.5.dfsg+1.5.0.14~prepatch071011b-0ubuntu1) dapper-security; urgency=low

  * New security/stability upstream release (v2.0.0.8) - 1.8.0.14 prepatches
    - CVE-2007-1095 - Trick the user when leaving the page
    - CVE-2007-5334 - Trick the user by changing the titlebar
    - CVE-2007-3511 - file input focus stealing vulnerability
    - CVE-2007-5335 - addMicrosummaryGenerator sidebar method can install from
      file URI (1.8.0 doesn't ship the affected feature)
    - CVE-2007-2292 - Browser Digest Authentication Request Splitting
    - CVE-2007-5336 - Notify on text changes before firing mutation events
    - CVE-2007-5337 - sftp protocol support
    - CVE-2007-5338 - Arbitrary code execution by polluting implicit
      XPCNativeWrapper
    - CVE-2007-5339 - crashes with evidence of memory corruption
      (layout + unsorted)
    - CVE-2007-5340 - crashes with evidence of memory corruption (javascript)
    - CVE-2007-5341 - Bugs in Venkman extension (not shipped)
    - CVE-2007-4841 - URIs with invalid % encodings launch wrong handler on
      WinXP+IE7 (not affected)

 -- Alexander Sack <email address hidden>   Thu, 18 Oct 2007 15:32:18 +0200