On Sat, 07 Aug 2004 18:13:31 -1000, Warren Togami wrote: > Michael Schwendt wrote: > > On Fri, 6 Aug 2004 08:43:18 -0500, Rodney Gordon II wrote: > > > > > >>Just noticed the new Mozilla coming in the tree, I am just wondering if there > >>will be some updates for Firefox's security.. > >> > >>TIA :) > > > > > > I see this in the queue: > > https://bugzilla.fedora.us/show_bug.cgi?id=1846 > > > > > > Yes. 0.9.3 coming soon, but the existing 0.9.1 actually is not > vulnerable to the libpng vulnerability because it uses the system png > library. 0.9.3 plugs the other holes which I believe are only DoS aside > from png? A DoS and spoofing bug vulnerability: http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.2