firefox 1.5.dfsg+1.5.0.4-0ubuntu6.06 source package in Ubuntu

Changelog

firefox (1.5.dfsg+1.5.0.4-0ubuntu6.06) dapper-security; urgency=low

  * New upstream version, 1.5.0.4, security/stability fixes
    from upstream.  This is known to include the following security fixes:
    - MFSA 2006-43, CVE-2006-2777: Privilege escalation using
      addSelectionListener
    - MFSA 2006-42, CVE-2006-2783: Web site XSS using BOM on UTF-8
      pages
    - MFSA 2006-41, CVE-2006-2782: File stealing by changing input
      type (variant)
    - MFSA 2006-38, CVE-2006-2778: Buffer overflow in
      crypto.signText()
    - MFSA 2006-37, CVE-2006-2776: Remote compromise via
      content-defined setter on object prototypes
    - MFSA 2006-36, CVE-2006-2784: PLUGINSPAGE privileged JavaScript
      execution 2
    - MFSA 2006-35, CVE-2006-2775: Privilege escalation through XUL
      persist
    - MFSA 2006-34, CVE-2006-2785: XSS viewing javascript: frames or
      images from context menu
    - MFSA 2006-33, CVE-2006-2786: HTTP response smuggling
    - MFSA 2006-32, CVE-2006-2779, CVE-2006-2780: Fixes for crashes with
      potential memory corruption
    - MFSA 2006-31, CVE-2006-2787: EvalInSandbox escape (Proxy
      Autoconfig, Greasemonkey)
    - CVE-2006-2788: Double memory free in nsIX509::getRawDER when
      called from JavaScript (Mozilla bug #321598)
    This package is based on Debian's firefox_1.5.dfsg+1.5.0.4.orig.tar.gz
    but has none of the corresponding Debian changes.

 -- Ian Jackson <email address hidden>   Tue,  6 Jun 2006 14:32:13 +0100