Debian Bug report logs - #505565
Mozilla SeaMonkey Multiple Vulnerabilities

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Giuseppe Iuculano <giuseppe@iuculano.it>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: Mozilla SeaMonkey Multiple Vulnerabilities

Date: Thu, 13 Nov 2008 16:13:46 +0100

Package: iceape
Severity: critical
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

The following SA (Secunia Advisory) id was published for SeaMonkey:

SA32714[1]

Description:
Some vulnerabilities have been reported in Mozilla SeaMonkey, which can
be exploited by malicious people to disclose sensitive information,
bypass certain security restrictions, or compromise a user's system.

For more information:
SA32693

The vulnerabilities are reported in versions prior to 1.1.13.

Solution:
Update to version 1.1.13.

Original Advisory:
http://www.mozilla.org/security/announce/2008/mfsa2008-47.html
http://www.mozilla.org/security/announce/2008/mfsa2008-48.html
http://www.mozilla.org/security/announce/2008/mfsa2008-49.html
http://www.mozilla.org/security/announce/2008/mfsa2008-50.html
http://www.mozilla.org/security/announce/2008/mfsa2008-52.html
http://www.mozilla.org/security/announce/2008/mfsa2008-54.html
http://www.mozilla.org/security/announce/2008/mfsa2008-55.html
http://www.mozilla.org/security/announce/2008/mfsa2008-56.html
http://www.mozilla.org/security/announce/2008/mfsa2008-57.html
http://www.mozilla.org/security/announce/2008/mfsa2008-58.html

Other References:
SA32693[2]

If you fix the vulnerability please also make sure to include the the
CVE id in the changelog entry.

[1]http://secunia.com/advisories/32714/
[2]http://secunia.com/advisories/32693/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkkcRCgACgkQNxpp46476aonswCeMfUB5+j2+eLl1Z8P9u1QnqZo
yU0An3CqF9pgPfO6J/qI9fF/i0yIp+jt
=QbeL
-----END PGP SIGNATURE-----

Message #10 received at 505565@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>

To: 505565@bugs.debian.org

Subject: Re: Mozilla SeaMonkey Multiple Vulnerabilities

Date: Thu, 20 Nov 2008 23:56:30 +0100

On Thu, Nov 13, 2008 at 04:13:46PM +0100, Giuseppe Iuculano wrote:
> Package: iceape
> Severity: critical
> Tags: security

Iceape still badly needs someone who's willing to care of security
updates for iceape during Lenny life time and has the time to do
so, as described in my mail to debian-devel from the 4th October:

| From: Moritz Muehlenhoff <jmm@inutil.org>
| Newsgroups: gmane.linux.debian.devel.general
| Subject: Volunteer needed for Iceape security updates in Lenny
|
| A volunteer is needed to build and test the Iceape security updates
| in Lenny. Patches are provided through a patch set for each update
| round, but the Security Team and the Mozilla maintainers lack the
| ressources for the proper integration work. So if you use Iceape
| and want to continue to use it in Lenny please step forward and
| mail pkg-mozilla-maintainers@lists.alioth.debian.org and keep
| team@security.debian.org CCed.

The other option (throwing it out) will be difficult, since 17 packages
build-depend on iceape-dev nowadays.

Cheers,
        Moritz

Message #15 received at 505565-done@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Giuseppe Iuculano <giuseppe@iuculano.it>, 505565-done@bugs.debian.org

Subject: Re: Bug#505565: Mozilla SeaMonkey Multiple Vulnerabilities

Date: Sat, 6 Dec 2008 10:10:41 +0100

Version: 1.1.13-1

On Thu, Nov 13, 2008 at 04:13:46PM +0100, Giuseppe Iuculano wrote:
> Solution:
> Update to version 1.1.13.

Send a report that this bug log contains spam.