Sure, I've reinstalled using that PPA and it appears to work, at least on
the test page www.mozilla.com/firefox/its-an-attack.html. Version info
below:

Package: firefox-3.5
Source: firefox-3.5
Priority: optional
Section: web
Installed-Size: 3600
Maintainer: Ubuntu Mozilla Team <email address hidden>
Architecture: amd64
Version: 3.5.3+build1+nobinonly-0ubuntu0.9.04.2
Recommends: ubufox
Replaces: firefox-3.1
Suggests: firefox-3.5-gnome-support (=
3.5.3+build1+nobinonly-0ubuntu0.9.04.2), latex-xft-fonts, libthai0
Provides: firefox-3.1, www-browser
Depends: fontconfig, psmisc, debianutils (>= 1.16), xulrunner-1.9.1 (>=
1.9.1), libasound2 (>> 1.0.18), libatk1.0-0 (>= 1.20.0), libc6 (>= 2.4),
libcairo2 (>= 1.2.4), libfontconfig1 (>= 2.4.0), libfreetype6 (>= 2.2.1),
libgcc1 (>= 1:4.1.1), libglib2.0-0 (>= 2.16.0), libgtk2.0-0 (>= 2.16.0),
libnspr4-0d (>= 4.7.3-0ubuntu1~), libpango1.0-0 (>= 1.14.0), libstdc++6 (>=
4.1.1), firefox-3.5-branding | abrowser-3.5-branding
Conflicts: firefox-3.1 (<< 3.1~b4~hg20090317)
Filename:
pool/main/f/firefox-3.5/firefox-3.5_3.5.3+build1+nobinonly-0ubuntu0.9.04.2_amd64.deb
Size: 948266
MD5sum: 9a5f16d9fa98fdba40a22aea650ec6ee
SHA1: 506d8f48a59599f41a0080c414c80b5095131a10
Description: safe and easy web browser from Mozilla
 Firefox delivers safe, easy web browsing. A familiar user interface,
 enhanced security features including protection from online identity theft,
 and integrated search let you get the most out of the web.

Package: xulrunner-1.9.1
Source: xulrunner-1.9.1
Priority: optional
Section: devel
Installed-Size: 27496
Maintainer: Ubuntu Mozilla Team <email address hidden>
Architecture: amd64
Version: 1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2
Recommends: libcanberra0
Depends: libasound2 (>> 1.0.18), libatk1.0-0 (>= 1.20.0), libc6 (>= 2.4),
libcairo2 (>= 1.6.0), libdbus-1-3 (>= 1.0.2), libdbus-glib-1-2 (>= 0.78),
libfontconfig1 (>= 2.4.0), libfreetype6 (>= 2.2.1), libgcc1 (>= 1:4.1.1),
libglib2.0-0 (>= 2.16.0), libgtk2.0-0 (>= 2.16.0), libhunspell-1.2-0 (>=
1.2.4), libidl0, libnspr4-0d (>= 4.7.3-0ubuntu1~), libnss3-1d (>= 3.12.3),
libpango1.0-0 (>= 1.14.0), libpython2.6 (>= 2.6), libsqlite3-0 (>= 3.6.10),
libstartup-notification0 (>= 0.8-1), libstdc++6 (>= 4.1.1), libx11-6,
libxrender1, libxt6, zlib1g (>= 1:1.1.4)
Conflicts: j2re1.4, libmozjs-dev, libxul-dev
Filename:
pool/main/x/xulrunner-1.9.1/xulrunner-1.9.1_1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2_amd64.deb
Size: 9240614
MD5sum: 2ce3ecbbc3f8c73f5a0bf46e5b7bd578
SHA1: da954cc65bcc7bd8a52791dce60467a98611a0f5
Description: XUL + XPCOM application runner
 XULRunner is a single "gecko runtime" that can be used to bootstrap
 multiple XUL + XPCOM applications that are as rich as Firefox and
 Thunderbird.
 .
 XUL is Mozilla's XML based User Interface language that lets you build
 feature-rich cross platform applications. These applications are easily
 customized with alternative text, graphics and layout so that they can be
 readily branded or localized for various markets. Web developers already
 familiar with Dynamic HTML (DHTML) will learn XUL quickly and can start
 building applications right away.
 .
 XPCOM is a cross platform component model. It has multiple language
 bindings and IDL descriptions so programmers can plug their custom
 functionality into the framework and connect it with other components.

I was using the mozilla daily PPA, in which it was fixed, until now but I
downgraded firefox-3.5 and xulrunner-1.9.1 and to the security update
staging PPA versions and it remains fixed!

Thanks,
dje

2009/9/10 Alexander Sack <email address hidden>

> On Wed, Sep 09, 2009 at 05:14:55PM -0000, dje wrote:
> > Any updates on when/if this will make Jaunty? I've managed to get the
> > Karmic packages running on Jaunty and the problem is fixed
> >
>
> The fixes should be in the security update staging PPA by
> now. https://edge.launchpad.net/~ubuntu-mozilla-security/+archive/ppa<https://edge.launchpad.net/%7Eubuntu-mozilla-security/+archive/ppa>
>
> However, those package will have to take a weekend de-tour through
> jaunty-proposed before they get in the -security and -updates
> repository.
>
> Would be precious if you could verify if upgrading to that ppa fixes
> this bug for you.
>
>  - Alexander
>
> --
> Firefox doesn't warn about Attack Sites!?
> https://bugs.launchpad.net/bugs/404827
> You received this bug notification because you are a direct subscriber
> of the bug.
>