DSA-1873-1 xulrunner -- programming error| ID: oval:org.secpod.oval:def:600480 | Date: (C)2011-05-13 (M)2024-02-19 |
| Class: PATCH | Family: unix |
Juan Pablo Lopez Yacubian discovered that incorrect handling of invalid URLs could be used for spoofing the location bar and the SSL certificate status of a web page. Xulrunner is no longer supported for the old stable distribution . For the stable distribution , this problem has been fixed in version 1.9.0.13-0lenny1. For the unstable distribution , this problem has been fixed in version 1.9.0.13-1. We recommend that you upgrade your xulrunner packages.
