firefox 2.0.0.12+0nobinonly+2-0ubuntu0.6.10 source package in Ubuntu

Changelog

firefox (2.0.0.12+0nobinonly+2-0ubuntu0.6.10) edgy-security; urgency=low

  * New security/stability release (v2.0.0.12)
  * New security/stability upstream release (v2.0.0.12) - 1.8.0.14 prepatches
  * MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corruption
    v1.8.1.12 (Browser crashes)
  * MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corruption
    v1.8.1.12 (javascript crashes)
  * MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing
    vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke
    blocking bugs
  * MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Code
    Execution (JavaScript privilege escalation bugs)
  * MFSA 2008-04 aka CVE-2008-0416: Multiple XSS vulnerabilities from
    character encoding
  * MFSA 2008-05 aka CVE-2008-0417: Stored password corruption
  * MFSA 2008-06 aka CVE-2008-0418: Directory traversal via chrome: URI
  * MFSA 2008-07 aka CVE-2008-0419: Web browsing history and forward
    navigation
    stealing
  * MFSA 2008-08 aka CVE-2008-0420: Possible information disclosure in BMP
    decoder
  * MFSA 2008-09 aka CVE-2008-0591: File action dialog tampering
  * MFSA 2008-10 aka CVE-2008-0592: Mishandling of locally-saved plain text
    files
  * MFSA 2008-11 aka CVE-2008-0593: URL token stealing via stylesheet redirect
  * MFSA 2008-12 aka CVE-2008-0594: Web forgery overwrite with div overlay

 -- Alexander Sack <email address hidden>   Mon, 04 Feb 2008 13:26:46 +0100