ffox 1.5.0.2/1.0.8 CVE-Ids, MFSAs and Bugzilla bugs

[Mike Hommey]

On Fri, Apr 14, 2006 at 11:41:06AM +0200, Alexander Sack <asac at debian.org> wrote:
> CVE-2006-1741 mfsa2006-09, 296514, 316589, 311024, 311619, 311892 -- browsers only
> CVE-2006-1742 mfsa2006-10, 311497, 311792, 312278, 313276, 313479, 313630, 313726, 313763, 313938, 325269 - all
> CVE-2006-1737 mfsa2006-11 280769, 265736, 280769, 311710, 313173, 315304, -- all
> CVE-2006-1738 mfsa2006-11 311710, 313173
> CVE-2006-1739 mfsa2006-11 265736
> CVE-2006-1740 mfsa2006-12, 271194 - browsers only
> CVE-2006-1736 mfsa2006-13, 293527 - browsers only
> CVE-2006-1735 mfsa2006-14, 311025, 311403, 311455 - all
> CVE-2006-1734 mfsa2006-15, 313370, 313684 - all
> CVE-2006-1733 mfsa2006-16, 312871, 313236, 313375 - all
> CVE-2006-1732 mfsa2006-17, 313373,  - all
> CVE-2006-0749 mfsa2006-18, 320182, 269095  - all
> CVE-2006-1731 mfsa2006-19, 327194, 290488  - all
> CVE-2006-1724 mfsa2006-20, 282105 - all
>   The following bugs were published with in mfsa2006-20, but don't have a
>   CVE-ID: 320459, 307989, 308086, 309120, 310436, 310638, 315254, 317544, 317546, 317549, 326615,
>   326644, 326834, 327941, 328509, 328839, 329406 - all (1.5/1.8 only)
> CVE-2006-0884 mfsa2006-21, 319858 - all
> CVE-2006-1730 mfsa2006-22, 325403, 319858 - all
> CVE-2006-1729 mfsa2006-23, 325947, 328566 - browsers only
> CVE-2006-1728 mfsa2006-24, 327126, - all
> CVE-2006-1727 mfsa2006-25, 325991, 328469 - all
> CVE-2006-1045 mfsa2006-26, 328917 - thunderbird only
> CVE-2006-0748 mfsa2006-27, 328937, 317554 - all
> CVE-2006-1726 mfsa2006-28, 323501 - all (1.5/1.8 only)
> CVE-2006-1725 mfsa2006-29, 327014 - browsers only
> CVE-2005-2353 nomfsa, 304330

Grrrr I hate the way mozilla deals with security... there's no way to
get to the bugs in spite of the fixes being released...
You are not authorized to access bug #......

Alex, since I'm afraid xulrunner 1.8.0.2 will not be released as soon as
I'd like it to be, could it be possible to get the individual patches so
that I can apply those concerning xulrunner for 1.8.0.1-9 ?

Thanks for the hard work.

Mike