Source Mage code commit list

[Eric Sandall <eric AT sandall.us>]

On Friday 23 February 2007 08:04:31 Ladislav Hagara wrote:
> GIT changes to master grimoire by Ladislav Hagara
> <ladislav.hagara AT unob.cz>:
>
>  http/firefox/DETAILS |    2 +-
>  http/firefox/HISTORY |    3 +++
>  2 files changed, 4 insertions(+), 1 deletion(-)
>
> New commits:
> commit 1e2fdcd256a91c7c4c49a645ca377560a5cd1a62
> Author: Ladislav Hagara <ladislav.hagara AT unob.cz>
> Commit: Ladislav Hagara <ladislav.hagara AT unob.cz>
>
>     firefox 2.0.0.2
>
> diff --git a/http/firefox/DETAILS b/http/firefox/DETAILS
> index 7b3f545..9064fa0 100755
> --- a/http/firefox/DETAILS
> +++ b/http/firefox/DETAILS
> @@ -5,7 +5,7 @@ if  [  "$FIREFOX_CVS"  ==  "y"  ];  then
>    
> SOURCE_URL[0]=cvs://:pserver:anonymous AT cvs-mirror.mozilla.org:/cvsroot:mozi
>lla/client.mk SOURCE_IGNORE=volatile
>  else
> -         VERSION=2.0.0.1
> +         VERSION=2.0.0.2
>            SOURCE=$SPELL-$VERSION-source.tar.bz2
>           SOURCE2=${SOURCE}.asc
>        SOURCE_GPG="firefox.gpg:${SOURCE2}:UPSTREAM_KEY"

This update includes various security fixes as well:
MFSA 2007-07  Embedded nulls in location.hostname confuse same-domain checks
MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow
MFSA 2007-05 XSS and local file access by opening blocked popups
MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot
MFSA 2007-03 Information disclosure through cache collisions
MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks
MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2)

See 
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.2

-sandalle

-- 
Eric Sandall                       | Source Mage GNU/Linux Developer
eric at sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/            | http://counter.li.org/  #196285

Attachment: pgpDdtH5tqgpD.pgp
Description: PGP signature