Hi, note that CVE-2008-2785 has been fixed with the 3.0.1-1 upload referring to the upstream security advisory on http://www.mozilla.org/security/announce/2008/mfsa2008-34.html
Unfortunately it is not yet clear whether CVE-2008-2786 is the same issue or not. Cheers Nico -- Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted.
pgp6ODVtExGvJ.pgp
Description: PGP signature

