Bug 23809
| Summary: | Обновить firefox | ||
|---|---|---|---|
| Product: | Branch p5 | Reporter: | AEN <aen> |
| Component: | cross-component | Assignee: | Nobody's working on this, feel free to take it <nobody> |
| Status: | CLOSED FIXED | QA Contact: | QA p5 <qa-p5> |
| Severity: | critical | ||
| Priority: | P3 | CC: | cas, dkoryavov, oddity |
| Version: | unspecified | ||
| Hardware: | all | ||
| OS: | Linux | ||
| Bug Depends on: | 24053 | ||
| Bug Blocks: | |||
Текущая версия 3.5.9 содержит 20 уязвимостей, более десятка из них - критические. Кроме того, на сколько я понимаю, текущая версия 3.5.9 собрана неправильно, со старой версией xulrunner (1.9.1.8) и, соответственно все ещё содержит ошибки исправленные в 3.5.9 (+ ещё 5 критических уязвимостей). Посему нужно не забыть собрать xulrunner 1.9.1.11 Соберу 3.6.x firefox-3.6-3.6.9-alt0.20100725.M50P.1 -> p5: * Mon Sep 06 2010 Andrey Cherepanov <cas@altlinux> 3.6.9-alt0.20100725.M50P.1 - backport to p5 branch (new version with security fixes) (closes: #23809) * Thu Jul 29 2010 Alexey Gladkov <legion@altlinux> 3.6.9-alt1.20100725 - New release (3.6.8). - Fixed: + MFSA 2010-48 Dangling pointer crash regression from plugin parameter array fix + MFSA 2010-47 Cross-origin data leakage from script filename in error messages + MFSA 2010-46 Cross-domain data theft using CSS + MFSA 2010-45 Multiple location bar spoofing vulnerabilities + MFSA 2010-44 Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish + MFSA 2010-43 Same-origin bypass using canvas context + MFSA 2010-42 Cross-origin data disclosure via Web Workers and importScripts + MFSA 2010-41 Remote code execution using malformed PNG image + MFSA 2010-40 nsTreeSelection dangling pointer remote code execution vulnerability + MFSA 2010-39 nsCSSValue::Array index integer overflow + MFSA 2010-38 Arbitrary code execution using SJOW and fast native function + MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability + MFSA 2010-36 Use-after-free error in NodeIterator + MFSA 2010-35 DOM attribute cloning remote code execution vulnerability + MFSA 2010-34 Miscellaneous memory safety hazards (rv:1.9.2.7/ 1.9.1.11) * Sun Jun 27 2010 Alexey Gladkov <legion@altlinux> 3.6.6-alt1.20100626 - New release (3.6.6). - Fixed: + MFSA 2010-33 User tracking across sites using Math.random() + MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present + MFSA 2010-31 focus() behavior can be used to inject or steal keystrokes + MFSA 2010-30 Integer Overflow in XSLT Node Sorting + MFSA 2010-29 Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal + MFSA 2010-28 Freed object reuse across plugin instances + MFSA 2010-26 Crashes with evidence of memory corruption (rv:1.9.2.4/ 1.9.1.10) По иронии судьбы вышла уже 3.6.9 версия с новыми критическими исправлениями :) Так же, у 3.6 проблемы - после некоторого времени использования на p5, почему-то перестает реагировать главное меню (вернее реагирует но с задержкой 5-10 секунд и сам firefox ооочень тормозит). Иногда, проявляется сразу, иногда, через неделю использования. firefox-3.6-3.6.9-alt0.20100725.M50P.1 -> 5.1: * Mon Sep 06 2010 Andrey Cherepanov <cas@altlinux> 3.6.9-alt0.20100725.M50P.1 - backport to p5 branch (new version with security fixes) (closes: #23809) * Thu Jul 29 2010 Alexey Gladkov <legion@altlinux> 3.6.9-alt1.20100725 - New release (3.6.8). - Fixed: + MFSA 2010-48 Dangling pointer crash regression from plugin parameter array fix + MFSA 2010-47 Cross-origin data leakage from script filename in error messages + MFSA 2010-46 Cross-domain data theft using CSS + MFSA 2010-45 Multiple location bar spoofing vulnerabilities + MFSA 2010-44 Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish + MFSA 2010-43 Same-origin bypass using canvas context + MFSA 2010-42 Cross-origin data disclosure via Web Workers and importScripts + MFSA 2010-41 Remote code execution using malformed PNG image + MFSA 2010-40 nsTreeSelection dangling pointer remote code execution vulnerability + MFSA 2010-39 nsCSSValue::Array index integer overflow + MFSA 2010-38 Arbitrary code execution using SJOW and fast native function + MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability + MFSA 2010-36 Use-after-free error in NodeIterator + MFSA 2010-35 DOM attribute cloning remote code execution vulnerability + MFSA 2010-34 Miscellaneous memory safety hazards (rv:1.9.2.7/ 1.9.1.11) * Sun Jun 27 2010 Alexey Gladkov <legion@altlinux> 3.6.6-alt1.20100626 - New release (3.6.6). - Fixed: + MFSA 2010-33 User tracking across sites using Math.random() + MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present + MFSA 2010-31 focus() behavior can be used to inject or steal keystrokes + MFSA 2010-30 Integer Overflow in XSLT Node Sorting + MFSA 2010-29 Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal + MFSA 2010-28 Freed object reuse across plugin instances + MFSA 2010-26 Crashes with evidence of memory corruption (rv:1.9.2.4/ 1.9.1.10) |
Description
AEN 2010-07-25 01:18:01 MSD