ffox 1.5.0.2/1.0.8 CVE-Ids, MFSAs and Bugzilla bugs

[Eric Dorland]

* Alexander Sack (asac at debian.org) wrote:
> 
> Hi,
> 
> here a list of CVE-IDs, MFSAs and bugs for todays firefox release ... 
> so you can properly document your upload in unstable.
> 
> Debian bugs are not listed. Please sort them into this list and
> communicate your findings. Thanks!
> 
> Distinct patches for sarge are on its way. Please be a bit patient,
> since this is a huge release.
> 
> Below the advisories fixed in 1.5.0.2. For 1.0.8 there are some
> more items that were fixed in 1.5.0.1. I will sort them out during
> final patch preparation.

Thanks for creating this list. Are you working on backporting the
security fixes to the sarge mozilla-firefox package? Should we
coordinate and split up the work? 
 
> If you find some problems or inconsistencies in belows advisories don't
> hesitate to raise your hands.
> 
> Happy Easter :)!

-- 
Eric Dorland <eric at kuroneko.ca>
ICQ: #61138586, Jabber: hooty at jabber.com
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20060414/e741e038/attachment.pgp