Bugzilla Bug 130887

splitting #129924 in one bug per package for helping handling

http://www.mozilla.org/projects/security/known-vulnerabilities.html#Mozilla

Fixed in Mozilla 1.7.13
MFSA 2006-27  Table Rebuilding Code Execution Vulnerability
MFSA 2006-25 Privilege escalation through Print Preview
MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest
MFSA 2006-23 File stealing by changing input type
MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability
MFSA 2006-21 JavaScript execution in mail when forwarding in-line
MFSA 2006-19 Cross-site scripting using .valueOf.call()
MFSA 2006-18 Mozilla Firefox Tag Order Vulnerability
MFSA 2006-17 cross-site scripting through window.controllers
MFSA 2006-16 Accessing XBL compilation scope via valueOf.call()
MFSA 2006-15 Privilege escalation using a JavaScript function's cloned parent
MFSA 2006-14 Privilege escalation via XBL.method.eval
MFSA 2006-13 Downloading executables with "Save Image As..."
MFSA 2006-12 Secure-site spoof (requires security warning dialog)
MFSA 2006-11 Crashes with evidence of memory corruption (rv:1.8)
MFSA 2006-10 JavaScript garbage-collection hazard audit
MFSA 2006-09 Cross-site JavaScript injection using event handlers
MFSA 2006-05 Localstore.rdf XML injection through XULDocument.persist()
MFSA 2006-03 Long document title causes startup denial of Service
MFSA 2006-01 JavaScript garbage-collection hazards

same as the moz-1.0.8 thing (#129924), moz team, please provide a new ebuild
www-client/mozilla-1.7.13

include net-libs/gecko-sdk

-bin is in the tree, go ahead and test and mark stable.

1.7.13 source is in tree mark stable. amd64 and x86 do not forget to mark -bin
stable as well.

mozilla-1.7.13 stable on alpha and amd64
mozilla-bin-1.7.13 stable on amd64

(In reply to comment #2)
> include net-libs/gecko-sdk

Leaving alpha and amd64 on CC while we wait for a new net-libs/gecko-sdk.

(In reply to comment #2)
> include net-libs/gecko-sdk
> 
is now in the tree please mark 1.7.13 stable

gecko-sdk-1.7.13 stable on amd64

gecko-sdk-1.7.13 stable on alpha

sparc stable.

Stable on x86.

We had mozilla-bin failed due to the older ebuilds not being ported to modular
X, but I ignored it, since this is definitely more important.  I definitely
recommend removing all of the older ebuilds for -bin.

ppc stable

Stable on hppa.

This is GLSA 200604-18 thx everyone and especially falco