Multiple vulnerabilities have been reported in Firefox, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and HTTP response smuggling attacks, and potentially compromise a user's system.
2) Some errors in the browser engine can be exploited to cause a memory corruption.
Successful exploitation may allow execution of arbitrary code.
3) Two errors in the handling of specially crafted HTTP responses in certain situations can be exploited to cause the browser to process a response as two separate responses from different sites.
Successful exploitation allows execution of arbitrary HTML and script in a user's browser session in context of an arbitrary site, but requires that the browser is configured to use a proxy or that the malicious site shares the same IP address as the targeted site.
4) Two errors in the handling of the "View Image" and "Show only this frame" functionalities can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an arbitrary site by e.g. tricking a user into right-clicking and choosing "View Image" on a broken image.
7) An error caused due to an off-by-two array boundary error in the "crypto.signText()" function can be exploited to cause a buffer overflow by passing optional Certificate Authority name arguments.
Update to version 22.214.171.124.
Provided and/or discovered by:
2) Mozilla Developers
3) Kazuho Oku, Cybozu Labs
4) Paul Nickerson
5) Jonas Sicking, Mozilla
6) Paul Nickerson and moz_bug_r_a4
7) Mikolaj J. Habryn
8) Masatoshi Kimura
Moz team, please bump 126.96.36.199 ebuild please
The 1.0 branch is probably vulnerable to certain of the issues, but this is not fixed yet regarding http://www.mozilla.org/projects/security/known-vulnerabilities.html
to what Secunia reports
the whole list it then :
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
sorry for the spam. I shoud stop bugzie or take some rest
According to the advisory all versions are affected. No bugfix for 1.0.8, yet and despite the announcement, I still get "access denied" when I try to look at the relevant upstream bugs.
*** Bug 135282 has been marked as a duplicate of this bug. ***
(In reply to comment #5)
> According to the advisory all versions are affected. No bugfix for 1.0.8, yet
> and despite the announcement, I still get "access denied" when I try to look at
> the relevant upstream bugs.
There won't be any more updates to the 1.0.x-series (and the mozilla-suite), this was publicly announced a few weeks ago:
188.8.131.52 is in the tree feel free to add all archs and have them mark stable. Do not forget to have amd64 and x86 mark -bin stable.
Well time is here it is 184.108.40.206 for all or nothing. There are gonna be no more revisions for the 1.0.x branch!! If for some reason your arch will not work with 1.5.x we will have to mask firefox on that arch until problem is resolved, patches can be backported but that will be left up to the archs to handle that can not deal with 1.5.x series of firefox. I will handle amd64 source and binary package x86 team do not forget -bin as well please.
amd64 and ppc already done sorry forgot to add you last go around
amd64 and ppc will have to stabilize 220.127.116.11 since 1.0.x seems to be unmaintained by upstream now.
arches, don't forget -bin :)
(In reply to comment #11)
> amd64 and ppc will have to stabilize 18.104.22.168 since 1.0.x seems to be
> unmaintained by upstream now.
I would suggest ya read the entire bug before adding archs that are already done.
Stable on hppa.
firefox is still broken on alpha, see bug #128777. I've masked 'www-client/mozilla-firefox' in profiles/default-linux/alpha/package.mask until it is fixed. I also masked the 'firefox' USE flag in profiles/default-linux/alpha/use.mask.
Ready for GLSA.