On Sat, 28 Jul 2007, Geert Hendrickx replied to me:

>> I'm trying to install firefox (2.0.0.5) from pkgsrc-current, but "make
>> fetch" complains about CVE-2006-2894, which I'm fairly sure was
>> addressed several versions ago.

> According to the Secunia entry, this issue is still unfixed:
> http://secunia.com/advisories/20442
>
> Do you have a reference at mozilla.org that this has been fixed in a
> released version?

No, I don't.  I just checked.  Looks as though I shouldn't trust my
memory on these things.  Sorry for the noise.

Anne Bennett.