firefox 1.5.dfsg+1.5.0.5-0ubuntu6.06 source package in Ubuntu

Changelog

firefox (1.5.dfsg+1.5.0.5-0ubuntu6.06) dapper-security; urgency=low

  * New upstream version 1.5.0.5, `security and stability fixes'.
    - MFSA 2006-44, CVE-2006-3801: Code execution through deleted frame
      reference [does not affect 1.0]
    - MFSA 2006-45, CVE-2006-3677: Javascript navigator Object
      Vulnerability [does not affect 1.0]
    - MFSA 2006-46, CVE-2006-3113: Memory corruption with simultaneous
      events [does not affect 1.0]
    - MFSA 2006-47, CVE-2006-3802: Native DOM methods can be hijacked
      across domains [does not affect 1.0]
    - MFSA 2006-48, CVE-2006-3803: JavaScript new Function race
      condition [does not affect 1.0]
    - MFSA 2006-50, CVE-2006-3805, CVE-2006-3806: JavaScript engine
      vulnerabilities
    - MFSA 2006-51, CVE-2006-3807: Privilege escalation using
      named-functions and redefined "new Object()"
    - MFSA 2006-52, CVE-2006-3808: PAC privilege escalation using
      Function.prototype.call
    - MFSA 2006-53, CVE-2006-3809: UniversalBrowserRead privilege
      escalation
    - MFSA 2006-54, CVE-2006-3810: XSS with XPCNativeWrapper
      (window).Function(...) [does not affect 1.0]
    - MFSA 2006-55, CVE-2006-3811: Crashes with evidence of memory
      corruption (rv:1.8.0.5)
    - MFSA 2006-56, CVE-2006-3812: chrome: scheme loading remote
      content
  * The above includes upstream's different fixes for Malone 45395's
    two crashing bugs in nsCopySupport.cpp and nsHTMLFormatConverter.cpp.
  * Reran autoconf2.13.

 -- Ian Jackson <email address hidden>   Thu, 27 Jul 2006 12:13:37 +0100