Contents of /updates/1/mozilla-thunderbird/current/SOURCES/sha1.lst

Revision 166286 - (show annotations) (download)
Thu Nov 10 21:21:42 2011 UTC (12 years, 5 months ago) by doktor5000
File size: 293 byte(s)

- new version 3.1.6
  o fixes http://www.mozilla.org/security/announce/2011/mfsa2011-46.html
    (loadSubScript unwraps XPCNativeWrapper scope parameter, a malicious page
     could potentially exploit a Thunderbird user who had installed an add-on
     that used loadSubscript in vulnerable ways)
  o fixes http://www.mozilla.org/security/announce/2011/mfsa2011-47.html
    (Potential cross-site-scripting against sites using Shift-JIS encoding,
     CVE-2011-3648)
  o fixes http://www.mozilla.org/security/announce/2011/mfsa2011-49.html
    (memory corruption while profiling using Firebug, CVE-2011-3650)
- fixed CVE-2011-3640, untrusted search path vulnerability which might allow
  local users to gain privileges via a Trojan horse pkcs11.txt file in a
  top-level directory (fix-CVE-2011-3640.patch, from upstream)