oem-qa team mailing list archive

[feranick <feranick@xxxxxxxxxxx>]

** Changed in: dell-mini
       Status: Confirmed => Fix Committed

-- 
Please update Web browser (firefox) to 3.0.11
https://bugs.launchpad.net/bugs/386555
You received this bug notification because you are a member of OEM
Services QA, which is subscribed to The Dell Mini Project.

Status in Dell Inspiron Mini with Custom Dell UI: Fix Committed

Bug description:
Firefox (a.k.a. Web Browser) version 3.0.11 has been released for generic hardy. It fixes several vulnerabilities and stability issues, see below. It should be ported to hardy for the dell mini at the earliest.


MFSA 2009-32  JavaScript chrome privilege escalation
MFSA 2009-31 XUL scripts bypass content-policy checks
MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar
MFSA 2009-29 Arbitrary code execution using event listeners attached to an element whose owner document is null
MFSA 2009-28 Race condition while accessing the private data of a NPObject JS wrapper class object
MFSA 2009-27 SSL tampering via non-200 responses to proxy CONNECT requests
MFSA 2009-26 Arbitrary domain cookie access by local file: resources
MFSA 2009-25 URL spoofing with invalid unicode characters
MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)

# Several issues were reported with the internal database, SQLite, which have now been fixed by upgrading to a newer version.
# Fixed an issue where, in some specific cases, the bookmarks database would become corrupt. (bug 464486) 

Complete list of bug fixed:
https://bugzilla.mozilla.org/buglist.cgi?keywords_type=anywords&keywords=fixed1.9.0.11+verified1.9.0.11