* Javier Fernández-Sanguino Peña ([EMAIL PROTECTED]) wrote:
> Package: mozilla-firefox
> Version: 1.0+dfsg.1-4
> Priority: normal
> Tags: patch security
> 
> The run-mozilla.sh script provided at /usr/lib/mozilla creates temporary
> files when running with 'debugging' enabled in an unsafe way. Please see
> the attached patch for a proposed fix.
> 
> I'm not setting this as a higher priority since that code is not intented 
> for end users, and the broken code only is executed if debugging is 
> enabled. Something which, probably, only a few users will do.

Thanks. Could you file this with the upstream bugzilla as well
(bugzilla.mozilla.org), so it will be carried upstream. 

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
------END GEEK CODE BLOCK------

Attachment: signature.asc
Description: Digital signature

Reply via email to