Re: Some CVE updates
On Wed, Apr 14, 2010 at 12:27:49AM +0200, Mike Hommey wrote:
> Hi,
>
> I went through the CVE list on the security tracker, and noted 2 CVEs
> marked as vulnerable in testing/unstable while it is not the case:
> - CVE-2009-4630 was fixed during the gecko 1.9.1 development cycle, and
> as such was already fixed in all 2.x versions of iceape and 1.9.1.x
> and 1.9.2.x versions of xulrunner.
> - CVE-2010-0182 was fixed in xulrunner 1.9.1.9-1, but I had to leave it
> out of the changelog because at the time I wrote it, the equivalent
> MFSA information was broken on mozilla.org, and I couldn't know what
> CVE it was about.
The latter was also fixed in xulrunner 1.9.2.2, so, as 1.9.2.3 was the
first version in experimental, it's also fixed in the version in
experimental.
Mike
Reply to: