mozilla-firefox 1.0.4-2 security holes (was Re: Security fixes for mozilla and firefox in Sarge?)
I compiled the following list this morning:
CAN-2004-0718
CAN-2005-1937 = MFSA-2005-51
CAN-2005-2114
CAN-2005-2260 = MFSA-2005-45
CAN-2005-2261 = MFSA-2005-46
CAN-2005-2262 = MFSA-2005-47
CAN-2005-2263 = MFSA-2005-48
CAN-2005-2264 = MFSA-2005-49
CAN-2005-2265 = MFSA-2005-50
CAN-2005-2266 = MFSA-2005-52
CAN-2005-2267 = MFSA-2005-53 (embargoed until 2005-08-01)
CAN-2005-2268 = MFSA-2005-54
CAN-2005-2269 = MFSA-2005-55
CAN-2005-2270 = MFSA-2005-56 (embargoed until 2005-08-01)
CAN-2005-2395
Sources:
http://www.cve.mitre.org/cgi-bin/cvekey.cgi?keyword=firefox
for (>= CAN-2005-1937)
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox
Debian bug #318061 sort-of covers some of the above issues, but the bts
says it will be archived in 19 days, even though the bug is still open
for the version in Stable. Is this normal?
--
Sam Morris
http://robots.org.uk/
PGP key id 5EA01078
3412 EA18 1277 354B 991B C869 B219 7FDB 5EA0 1078
Reply to: