firefox 1.5.dfsg+1.5.0.15~prepatch080202a-0ubuntu1 source package in Ubuntu

Changelog

firefox (1.5.dfsg+1.5.0.15~prepatch080202a-0ubuntu1) dapper-security; urgency=low

  [ Alexander Sack ]
  * New security/stability upstream release (v2.0.0.12) - 1.8.0.14 prepatches
  * MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corruption
    v1.8.1.12 (Browser crashes)
  * MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corruption
    v1.8.1.12 (javascript crashes)
  * MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing
    vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke blocking
    bugs
  * MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Code
    Execution (JavaScript privilege escalation bugs)
  * MFSA 2008-04 aka CVE-2008-0416: Multiple XSS vulnerabilities from
    character encoding
  * MFSA 2008-05 aka CVE-2008-0417: Stored password corruption
  * MFSA 2008-06 aka CVE-2008-0418: Directory traversal via chrome: URI
  * MFSA 2008-07 aka CVE-2008-0419: Web browsing history and forward navigation
    stealing
  * MFSA 2008-08 aka CVE-2008-0420: Possible information disclosure in BMP
    decoder
  * MFSA 2008-09 aka CVE-2008-0591: File action dialog tampering
  * MFSA 2008-10 aka CVE-2008-0592: Mishandling of locally-saved plain text
    files
  * MFSA 2008-11 aka CVE-2008-0593: URL token stealing via stylesheet redirect
  * MFSA 2008-12 aka CVE-2008-0594: Web forgery overwrite with div overlay
  * new patches in patches/ directory.
    - 0035_400556-attachment-291144.patch
    - 0036_404627-attachment-289554.patch
    - 0037_373344-attachment-290723.patch
    - 0038_197052-attachment-293907.patch
    - 0039_408256-attachment-293003.patch
    - 0040_398085-(backport-for-1.8.0-based-on-attachment-294254).patch
    - 0041_407720-(backported-attachment-292398).patch
    - 0042_405299-attachment-290682.patch
    - 0043_397427-attachment-289039.patch
    - 0044_398088-attachment-293903.patch
    - 0045_398006-(backported-attachment-285966-to-1.8.0-branch).patch
    - 0046_372075-attachment-283810.patch
    - 0047_402150-attachment-287556.patch
    - 0048_387258-attachment-284314.patch
    - 0049_404252-attachment-294506.patch
    - 0050_407161-attachment-291904.patch
    - 0051_390597-attachment-294507.patch
    - 0052_402087-attachment-294455.patch
    - 0053_396613-attachment-294993.patch
    - 0054_386695-attachment-271164.patch
    - 0055_399298-attachment-294508-(plus-merge-fix-from-CVS).patch
    - 0056_394610-attachment-294615.patch
    - 0057_393141-attachment-299679.patch
    - 0058_413135-attachment-298006-299567-combined.patch
    - 0059_413250-attachment-299017.patch
    - 0060_406572-attachment-296606.patch
    - 0061_346405-attachment-298420.patch
    - 0062_364801-attachment-286245.patch
    - 0063_412363-attachment-299387.patch
    - 0064_393762-attachment-294964.patch
    - 0065_364801-attachment-286245-(fix-build).patch
    - 0066_411072-attachment-296728.patch
    - 0067_405818-attachment-298126-(followup-for-397427).patch
    - 0068_376473-attachment-299684.patch
    - 0069_413250-attachment-300720.patch
    - 0070_413250-attachment-300976-(fix-french-help-regresion).patch

 -- Alexander Sack <email address hidden>   Mon, 04 Feb 2008 12:59:19 +0100