CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2009/03/28 09:59:04
Modified files:
www/mozilla-firefox: Makefile distinfo
Log message:
mozilla-firefox-3.0.8: forced release after security bugs got
attention
MFSA 2009-12 Mozilla Firefox XSL Parsing 'root' XML Tag Remote
Memory Corruption Vulnerability
* http://www.securityfocus.com/bid/34235/exploit
* https://bugzilla.mozilla.org/show_bug.cgi?id=485217
* CVE-2009-1169
MFSA 2009-12 covers the Pwn2Own bug, which is a crash involving the XUL
<tree> widget.
* https://bugzilla.mozilla.org/show_bug.cgi?id=484320
* CVE-2009-1044
ok naddy@
