Latest firefox vulnerability

[Moritz Muehlenhoff]

Michael Stone wrote:
> Has anyone started looking into the latest set of vulnerabilities (the 
> firefox 1.5.0.4 set)?

Is it actually sanely backportable to Sarge? I remember having read about
API incompatibilities for Firefox extensions.

Support for 1.0.x has stopped with the last round of Firefox issues; they
don't provide fixed packages and they don't give us access to the Bugzilla
entries describing the problems to even research the status of 1.0.x.

We will most definitely again reach the point, where the Woody packages
of Mozilla were/are; full of unfixable security problems.

Is there any sign that their security procedures will improve with xulrunner?

Cheers,
        Moritz