[Secure-testing-commits] r350 - sarge-checks/CAN

Joey Hess joeyh@costa.debian.org
Sat, 05 Feb 2005 16:31:37 +0100


Author: joeyh
Date: 2005-02-05 16:31:34 +0100 (Sat, 05 Feb 2005)
New Revision: 350

Modified:
   sarge-checks/CAN/list
Log:
moz update


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-02-05 14:53:23 UTC (rev 349)
+++ sarge-checks/CAN/list	2005-02-05 15:31:34 UTC (rev 350)
@@ -898,12 +898,8 @@
 CAN-2004-1157 (Opera 7.x up to 7.54, and possibly other versions, allows remote ...)
 	NOTE: not-for-us (Opera)
 CAN-2004-1156 (Mozilla through 1.7.x, and Mozilla Firefox through 1.x, allows remote ...)
-	TODO: check
-	NOTE: unable to really reproduce it using their test page and
-	NOTE: firefox.. but my setup is pretty nonstandard -- joey
-	NOTE: I can confirm it works on Debian sid -- Djoume
-	- mozilla (unfixed; bug filed)
-	- mozilla-firefox (unfixed; bug filed)
+	- mozilla (unfixed; bug #293663)
+	- mozilla-firefox (unfixed; bug #293664)
 CAN-2004-1155 (Internet Explorer 5.01 through 6 allows remote attackers to spoof ...)
 	NOTE: not-for-us (Microsoft MSIE)
 CAN-2004-1154 (Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x ...)