[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: UPDATE: www/mozilla-firefox 1.0.1



Christian Weisgerber [Sat Feb 26, 2005 at 01:15:16PM +0000] wrote:
>This is a straightforward update of www/mozilla-firefox to the
>Firefox 1.0.1 release.  I simply plugged in the new distfile.
>(Very minor changes: One patch has been regenerated, and I've folded
>in a bit of dependency clean-up by alek_(_at_)__(_dot_)_)
>
>The 1.0.1 release addresses a number of security vulnerabilities.
>To counter IDN spoofing, Firefox will now always display the raw
>punycode domain name.  My testing confirms this on i386.
>
>On amd64 and sparc64, IDN appears completely broken--Firefox will
>try to resolve the straight UTF-8 name (after % encoding).  This
>accidentally confers immunity to IDN spoofing, I guess.
>
>PLEASE TEST.
>
Works for me, on i386.

Regards,
	Bernd



Visit your host, monkey.org