Summary: | mail-client/mozilla-thunderbird{-bin} <= 1.0.7 Attachment Spoofing | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Rob M. <thehandoftyr> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | mozilla |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://secunia.com/secunia_research/2005-22/advisory/ | ||
Whiteboard: | A4 [noglsa] Koon | ||
Package list: | Runtime testing required: | --- |
Description
Rob M.
2006-01-26 16:32:15 UTC
Mozilla please advise. mozilla team, please advise if stabling 1.5 is an option here... 1.5 can be stablized use -r1 if you wish to stablize right now please. I will get enigmail-0.94.0 in tree in a day or so should stablize it at same time. enigmail-0.94.0 is the tree, If you wish to mark 1.5-r1 stable do not forget to stabilize enigmail. This is https://bugzilla.mozilla.org/show_bug.cgi?id=300246 Apparently too late for 1.0.8 I'd prefer not to rush 1.5 stable just for such a lame vulnerability (In reply to comment #5) > This is https://bugzilla.mozilla.org/show_bug.cgi?id=300246 > Apparently too late for 1.0.8 > > I'd prefer not to rush 1.5 stable just for such a lame vulnerability > This last comment is now obsolete since the 1.5 branch is the only maintained branch now. Except for Alpha, every arch is fixed. Concerning Alpha, Alpha will have to keyword the 1.5 branch because 1.0 is not maintained anymore, and 1.0 is affected by several vulnerabilities. I suggest closing this bug as soon as Alpha stabilize 1.5.0.4 in bug 135256. > Except for Alpha, every arch is fixed. Concerning Alpha, Alpha will have to > keyword the 1.5 branch because 1.0 is not maintained anymore, and 1.0 is > affected by several vulnerabilities. > I suggest closing this bug as soon as Alpha stabilize 1.5.0.4 in bug 135256. Alpha can't stabilize the 1.5 branch (see bug 130888 and bug 128777). We can close this bug. (noglsa, was already corrected some weeks ago) Closing as fixed in 1.5-line. |