oss-security - Re: firefox 2.0.0.13

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 26 Mar 2008 22:05:40 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: Jonathan Smith <smithj@...ethemallocs.com>
Subject: Re: firefox 2.0.0.13

On Tue, 25 Mar 2008, Josh Bressers wrote:

> The advisories should be posted soon.  It is a security update comparable
> to past ones.

Josh,

Any idea on what Mozilla means by using CVE-2008-1240 in MFSA 2008-18?
They already list CVE-2008-1195, which is associated with the Sun
advisory, and that seems like the only issue they're really trying to
address.

Thanks,
Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.