Subject: Re: pkg/26594 update mozilla and mozilla-gtk2 to 1.7.2
To: None <gnats-bugs@NetBSD.org>
From: Pavel Cahyna <pcah8322@artax.karlin.mff.cuni.cz>
List: pkgsrc-bugs
Date: 08/09/2004 22:54:51
You probably forgot to update the vulnerability list.
Also, it does not contain entry for Mozilla<=1.6 and Netscape remote
exploit:
http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities&flashstatus=false

(please see
http://www.mozilla.org/projects/security/known-vulnerabilities.html for a
comprehensive list of Mozilla and Firefox vulnerabilities.)