oss-security - Re: firefox 2.0.0.13

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 26 Mar 2008 22:05:40 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: Jonathan Smith <smithj@...ethemallocs.com>
Subject: Re: firefox 2.0.0.13

On Tue, 25 Mar 2008, Josh Bressers wrote:

> The advisories should be posted soon.  It is a security update comparable
> to past ones.

Josh,

Any idea on what Mozilla means by using CVE-2008-1240 in MFSA 2008-18?
They already list CVE-2008-1195, which is associated with the Sun
advisory, and that seems like the only issue they're really trying to
address.

Thanks,
Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.