lp://staging/ubuntu/edgy-security/firefox

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

53. By Alexander Sack on 2008-04-18

* New security/stability release (v2.0.0.14)
  - see USN-602-1

52. By Alexander Sack on 2008-03-25

* New security/stability release (v2.0.0.13)
  - see USN-592-1

51. By Alexander Sack on 2008-02-04

* New security/stability release (v2.0.0.12)
* New security/stability upstream release (v2.0.0.12) - 1.8.0.14 prepatches
* MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corruption
  v1.8.1.12 (Browser crashes)
* MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corruption
  v1.8.1.12 (javascript crashes)
* MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing
  vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke
  blocking bugs
* MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Code
  Execution (JavaScript privilege escalation bugs)
* MFSA 2008-04 aka CVE-2008-0416: Multiple XSS vulnerabilities from
  character encoding
* MFSA 2008-05 aka CVE-2008-0417: Stored password corruption
* MFSA 2008-06 aka CVE-2008-0418: Directory traversal via chrome: URI
* MFSA 2008-07 aka CVE-2008-0419: Web browsing history and forward
  navigation
  stealing
* MFSA 2008-08 aka CVE-2008-0420: Possible information disclosure in BMP
  decoder
* MFSA 2008-09 aka CVE-2008-0591: File action dialog tampering
* MFSA 2008-10 aka CVE-2008-0592: Mishandling of locally-saved plain text
  files
* MFSA 2008-11 aka CVE-2008-0593: URL token stealing via stylesheet redirect
* MFSA 2008-12 aka CVE-2008-0594: Web forgery overwrite with div overlay

50. By Alexander Sack on 2007-12-04

* New stability upstream release (v2.0.0.11)
* fix canvas regression introduced in firefox 2.0.0.10

49. By Alexander Sack on 2007-11-25

* New security/stability upstream release (v2.0.0.10)
* MFSA 2007-37 aka CVE-2007-5947
* MFSA 2007-38 aka CVE-2007-5959
* MFSA 2007-39 aka CVE-2007-5960

48. By Alexander Sack on 2007-10-19

* New security/stability upstream release (v2.0.0.8)
* MFSA 2007-29 aka CVE-2007-5339 (browser), CVE-2007-5340 (javascript)
* MFSA 2007-30 aka CVE-2007-1095
* MFSA 2007-31 aka CVE-2007-2292
* MFSA 2007-32 aka CVE-2007-3511, CVE-2006-2894
* MFSA 2007-33 aka CVE-2007-5334
* MFSA 2007-34 aka CVE-2007-5337
* MFSA 2007-35 aka CVE-2007-5338
* MFSA 2007-36 aka CVE-2007-4841 (windows only)

47. By Alexander Sack on 2007-07-31

* New security/stability upstream release (v2.0.0.6)
* MFSA 2007-26 aka CVE-2007-3844
* MFSA 2007-27 aka CVE-2007-3845

46. By Alexander Sack on 2007-07-18

* New security/stability upstream release (v2.0.0.5)
* MFSA 2007-18 aka CVE-2007-3734 (browser), CVE-2007-3735 (Javascript)
* MFSA 2007-19 aka CVE-2007-3736
* MFSA 2007-20 aka CVE-2007-3089
* MFSA 2007-21 aka CVE-2007-3737
* MFSA 2007-22 aka CVE-2007-3285
* MFSA 2007-23 aka CVE-2007-3670
* MFSA 2007-24 aka CVE-2007-3656
* MFSA 2007-25 aka CVE-2007-3738

45. By Alexander Sack on 2007-05-31

* New security/stability upstream updated (v2.0.0.4)
* MFSA2007-17 aka CVE-2007-2871: XUL Popup Spoofing
* MFSA2007-16 aka CVE-2007-2870: XSS using addEventListener
* MFSA2007-14 aka CVE-2007-1362: Path Abuse in Cookies
* MFSA2007-13 aka CVE-2007-2869: Persistent Autocomplete Denial of Service
* MFSA2007-12 aka CVE-2007-2867 (layout engine) + CVE-2007-2868
  (javascript engine): Crashes with evidence of memory corruption
* configure.in, configure: drop visibility hidden attribute patch
  as it has been applied upstream; regen configure accordingly
* uriloader/exthandler/unix/nsOSHelperAppService.cpp: drop modifications
  we previously carried for bz273524; the helper part has been dealt with
  in landing of bz373955 attachment 260203
* embedding/browser/gtk/src/EmbedWindow.cpp: drop patch since bz312998
  has been applied upstream

44. By Alexander Sack on 2006-03-24

* New security/stability upstream updated (v2.0.0.3)
* MFSA2007-11 aka CVE-2007-1562: FTP PASV port-scanning