Bug 92394 – www-client/mozilla: Mozilla 1.7.8 fixes (CAN-2005-147{6|7})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Jean-François Brunette (RETIRED) 2005-05-12 09:19:12 UTC]

MFSA 2005-44  Privilege escalation via non-DOM property overrides
MFSA 2005-43 "Wrapped" javascript: urls bypass security checks
MFSA 2005-42 Code execution via javascript: IconURL

[Comment 1 Lars Weiler (RETIRED) 2005-05-12 15:28:52 UTC]

Stable on ppc.

[Comment 2 Gustavo Zacarias (RETIRED) 2005-05-12 15:50:55 UTC]

sparc stable.

[Comment 3 Björn Michaelsen 2005-05-12 17:47:13 UTC]

builds fine, runs and renders slashdot and gentoo.org on x86. What more can you ask for?

Portage 2.0.51.19 (default-linux/x86/2005.0, gcc-3.3.5-20050130, glibc-2.3.4.20041102-r1, 2.6.10-rc3 i686)
=================================================================
System uname: 2.6.10-rc3 i686 AMD Athlon(tm) XP 2400+
Gentoo Base System version 1.4.16
Python:              dev-lang/python-2.1.3-r1,dev-lang/python-2.2.3-r5,dev-lang/python-2.3.5 [2.3.5 (#1, Apr 28 2005, 23:17:06)]
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-lang/python:     2.1.3-r1, 2.2.3-r5, 2.3.5
sys-apps/sandbox:    [Not Present]
sys-devel/autoconf:  2.59-r6, 2.13
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.5, 1.4_p6, 1.6.3, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r7
sys-devel/libtool:   1.5.16
virtual/os-headers:  2.6.8.1-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=athlon-xp -mmmx -m3dnow -fomit-frame-pointer -fforce-addr -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=athlon-xp -mmmx -m3dnow -fomit-frame-pointer -fforce-addr -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig candy ccache distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.osuosl.org/"
LANG="de_DE.utf8"
LC_ALL="de_DE.utf8"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 3dnow 3ds X Xaw3d aalib acpi acpi4linux alsa avi berkdb bitmap-fonts blas bzlib cdparanoia cdr crypt cscope cups curl dga divx4linux dvd dvdread editor eds emboss encode esd f2c fam fbcon ffmpeg font-server foomaticdb fortran gdbm gif gimpprint glut gstreamer gtk gtk2 guile imagemagick imlib java jikes joystick jpeg junit libg++ libwww live ltsp mad maildir mcal mikmod mmx mng motif mozilla moznocompose moznoirc moznomail mozp3p mozsvg mozxmlterm mp3 mpeg mpeg4 nas ncurses network nls nntp nptl nvidia offensive ogg oggvorbis openal opengl oscar oss pam pcre pdflib perl physfs pic plotutils png ppds python readline real rtc sasl sdl server slang softmmu spell sqlite sse ssl svg tcpd tetex tiff tools transcode truetype truetype-fonts type1-fonts unicode usb userlocales v4l v4l2 vim-with-x vorbis xinerama xml xml2 xsl xv xvid zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CBUILD, CTARGET, LDFLAGS, LINGUAS

[Comment 4 Bryan Østergaard (RETIRED) 2005-05-13 01:48:05 UTC]

Stable on alpha + ia64.

[Comment 5 Guy Martin (RETIRED) 2005-05-13 09:03:03 UTC]

Stable on hppa.

[Comment 6 Carsten Lohrke (RETIRED) 2005-05-13 10:58:25 UTC]

Stable on x86.

[Comment 7 Jan Brinkmann (RETIRED) 2005-05-13 12:34:46 UTC]

stable on amd64

[Comment 8 Matthias Geerdsen (RETIRED) 2005-05-13 13:31:27 UTC]

readding amd64 and x86 for mozilla-bin-1.7.8

[Comment 9 Thierry Carrez (RETIRED) 2005-05-13 13:37:59 UTC]

x8-, amd64; please test and mark mozilla-bin-1.7.8 stable

[Comment 10 Simon Stelling (RETIRED) 2005-05-14 01:35:14 UTC]

amd64 done

[Comment 11 Olivier Crete (RETIRED) 2005-05-14 10:44:29 UTC]

x86 there

[Comment 12 Sune Kloppenborg Jeppesen (RETIRED) 2005-05-15 03:29:12 UTC]

GLSA 200505-11

arm please remember to mark stable.