-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 31 May 2007 11:01:11 +0100 Source: firefox Binary: libnspr4 firefox-dom-inspector firefox-dev mozilla-firefox mozilla-firefox-dev libnss3 libnspr-dev firefox-gnome-support firefox-dbg libnss-dev firefox Architecture: all ia64 Version: 1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1 Distribution: dapper-security Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Alexander Sack Description: firefox - lightweight web browser based on Mozilla firefox-dbg - Debugging information for firefox firefox-dev - Development files for Mozilla Firefox firefox-dom-inspector - tool for inspecting the DOM of pages in Mozilla Firefox firefox-gnome-support - Support for Gnome in Mozilla Firefox libnspr-dev - Netscape Portable Runtime library - development files libnspr4 - Netscape Portable Runtime Library libnss-dev - Network Security Service Libraries - development libnss3 - Network Security Service Libraries - runtime mozilla-firefox - Transition package for firefox rename mozilla-firefox-dev - dummy transitional package Changes: firefox (1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1) dapper-security; urgency=low . * New upstream stability/security release * MFSA2007-17 aka CVE-2007-2871: XUL Popup Spoofing * MFSA2007-16 aka CVE-2007-2870: XSS using addEventListener * MFSA2007-14 aka CVE-2007-1362: Path Abuse in Cookies * MFSA2007-13 aka CVE-2007-2869: Persistent Autocomplete Denial of Service * MFSA2007-12 aka CVE-2007-2867 (layout engine) + CVE-2007-2868 (javascript engine): Crashes with evidence of memory corruption Files: 1ae8972c70bb0ed794fb8fc7f0efbf31 12879314 web optional firefox_1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb 86f6940ca7ebf11de512eeb6d850076b 226734 web optional firefox-dom-inspector_1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb 4f0f2d7f0d45f4214c3ec1961b7e7b74 95332 web optional firefox-gnome-support_1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb cf0379e9b694de7e9f2e216bb398b3a9 46660344 web optional firefox-dbg_1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb e2ebee95c2250a46bb6022578195a8e8 2806108 devel optional firefox-dev_1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb f969cd693a8209127962751985696a4d 214838 libs optional libnspr4_1.firefox1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb 866be97a43e42044789b084b33163a7f 220682 libdevel optional libnspr-dev_1.firefox1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb 908fe6e153e1043280940917f8786361 1150064 libs optional libnss3_1.firefox1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb 9fd37803d87ae99b21568e1e8b7bfeaa 245752 libdevel optional libnss-dev_1.firefox1.5.dfsg+1.5.0.12-0ubuntu0.6.06.1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFGX3d70N0xjzyQZEIRAs3+AJ9O9tOzh7iZ1PEMgCM6Tfk0oNMphACfYmHq NEo+aE4emW0RkAjdTCVwAbw= =WBco -----END PGP SIGNATURE-----