[warty] vulnerable to IDN spoofing problems
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Debian) |
Fix Released
|
Unknown
|
|||
firefox (Ubuntu) |
Fix Released
|
High
|
Thom May |
Bug Description
Automatically imported from Debian bug report #293975 http://
Debian Bug Importer (debzilla) wrote : | #1 |
Debian Bug Importer (debzilla) wrote : | #2 |
Message-Id: <1107768356.
Date: Mon, 07 Feb 2005 17:25:56 +0800
From: pabs <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: mozilla-firefox: vulnerable to IDN spoofing problems
--=-LLFYNxvH7ya
Content-Type: text/plain
Content-
Package: mozilla-firefox
Version: 1.0+dfsg.1-4
Severity: grave
Tags: security
Justification: user security hole
advisory: http://
demonstration: http://
highlights:
> I. Background
>=20
> International Domain Name [IDN] support in modern browsers allows attacke=
rs to=20
> spoof domain name URLs + SSL certs.
> III. The details
>=20
> Proof of concept URL:
>=20
> http://
>=20
> Clicking on any of the two links in the above webpage using anything but =
IE=20
> should result in a spoofed paypal.com webpage.
I confirm that this works on my sid machine.
> V. Workaround
>=20
> You can disable IDN support in mozilla products by setting 'network.enabl=
eIDN'=20
> to false.
I can confirm this works, but the domain not found message says
"http://
workaround.
> VI. Vendor Responses
>
> Mozilla: Working on finding a good long-term solution; provided clear=20
> workaround for disabling IDN.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (990, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-k7
Locale: LANG=3Den_AU.UTF-8, LC_CTYPE=
Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specif=
ic t
ii fontconfig 2.2.3-4 generic font configuration lib=
rary
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared librarie=
s an
ii libfontconfig1 2.2.3-4 generic font configuration lib=
rary
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared=
lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.2-1 The GLib library of C routines
ii libgtk2.0-0 2.6.1-2 The GTK+ graphical user interf=
ace=20
ii libidl0 0.8.3-1 library for parsing CORBA IDL =
file
ii libjpeg62 6b-9 The Independent JPEG Group's J=
PEG=20
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of intern=
atio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v=
3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol clien=
t li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous =
exte
ii libxft2 2.1.2-6 FreeType-based font drawing li=
brar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing exten=
sion
ii libxt6 4.3.0.dfsg.1-10 X T...
In Debian Bug tracker #293975, Frank Horowitz (frank-horowitz) wrote : mozilla-firefox: Disabling IDN support flakey. | #3 |
Package: mozilla-firefox
Version: 1.0+dfsg.1-2
Followup-For: Bug #293975
As noted in the report by pabs, there is a published workaround:
> V. Workaround
> >
> > You can disable IDN support in mozilla products by setting 'network.enableIDN'
> > to false.
>
> I can confirm this works, but the domain not found message says
> "http://
> workaround.
>
>
The workaround seems to disable IDN *during the current browser session only*.
Exiting, then re-launching the browser still exhibits IDN *even though
the preference is set to false*.
This is true irrespective of whether the browser cache is cleared, one
does a shift-refresh of the page, or the preference is set by hand in
the user.js file. Basically, the preference seems to have no effect
once the browser is relaunched.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=
Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specific t
ii fontconfig 2.2.3-4 generic font configuration library
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libfontconfig1 2.2.3-4 generic font configuration library
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.1-3 The GLib library of C routines
ii libgtk2.0-0 2.4.14-2 The GTK+ graphical user interface
ii libidl0 0.8.3-1 library for parsing CORBA IDL file
ii libjpeg62 6b-9 The Independent JPEG Group's JPEG
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of internatio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii libxft2 2.1.2-6 FreeType-based font drawing librar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing extension
ii libxrender1 0.8.3-7 X Rendering Extension client libra
ii libxt6 4.3.0.dfsg.1-10 X Toolkit Intrinsics
ii psmisc 21.5-1 Utilities that use the proc filesy
ii xlibs 4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
Debian Bug Importer (debzilla) wrote : | #4 |
Message-ID: <email address hidden>
Date: Tue, 08 Feb 2005 13:04:55 +0800
From: Frank Horowitz <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: mozilla-firefox: Disabling IDN support flakey.
Package: mozilla-firefox
Version: 1.0+dfsg.1-2
Followup-For: Bug #293975
As noted in the report by pabs, there is a published workaround:
> V. Workaround
> >
> > You can disable IDN support in mozilla products by setting 'network.enableIDN'
> > to false.
>
> I can confirm this works, but the domain not found message says
> "http://
> workaround.
>
>
The workaround seems to disable IDN *during the current browser session only*.
Exiting, then re-launching the browser still exhibits IDN *even though
the preference is set to false*.
This is true irrespective of whether the browser cache is cleared, one
does a shift-refresh of the page, or the preference is set by hand in
the user.js file. Basically, the preference seems to have no effect
once the browser is relaunched.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=
Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specific t
ii fontconfig 2.2.3-4 generic font configuration library
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libfontconfig1 2.2.3-4 generic font configuration library
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.1-3 The GLib library of C routines
ii libgtk2.0-0 2.4.14-2 The GTK+ graphical user interface
ii libidl0 0.8.3-1 library for parsing CORBA IDL file
ii libjpeg62 6b-9 The Independent JPEG Group's JPEG
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of internatio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii libxft2 2.1.2-6 FreeType-based font drawing librar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing extension
ii libxrender1 0.8.3-7 X Rendering Extension client libra
ii libxt6 4.3.0.dfsg.1-10 X Toolkit Intrinsics
ii psmisc 21.5-1 Utilities that use the proc filesy
ii xlibs 4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu
ii zlib1g ...
Thom May (thombot) wrote : | #5 |
*** Bug 12652 has been marked as a duplicate of this bug. ***
In Debian Bug tracker #293975, Ralph Katz (ralph-katz-rcn) wrote : mozilla-firefox: Reference bugzilla # 279099 | #6 |
See Bugzilla Bug 279099
https:/
Protect against homograph attacks (spoofing using punycode IDNs)
In Debian Bug tracker #293975, Mike Hommey (glandium) wrote : bug 293975 is forwarded to https://bugzilla.mozilla.org/show_bug.cgi?id=279099 | #7 |
# Automatically generated email from bts, devscripts version 2.8.10
forwarded 293975 https:/
Debian Bug Importer (debzilla) wrote : | #8 |
Message-ID: <email address hidden>
Date: Tue, 08 Feb 2005 15:02:08 -0500
From: Ralph Katz <email address hidden>
To: <email address hidden>
Subject: mozilla-firefox: Reference bugzilla # 279099
See Bugzilla Bug 279099
https:/
Protect against homograph attacks (spoofing using punycode IDNs)
Debian Bug Importer (debzilla) wrote : | #9 |
Message-Id: <email address hidden>
Date: Tue, 8 Feb 2005 21:39:03 +0100
From: Mike Hommey <email address hidden>
To: <email address hidden>
Subject: bug 293975 is forwarded to https:/
# Automatically generated email from bts, devscripts version 2.8.10
forwarded 293975 https:/
In Debian Bug tracker #293975, Eric Dorland (eric-debian) wrote : Re: Processed: Re: Bug#294439: mozilla-firefox: Phishing vulnerability using IDN | #10 |
forwarded 294439 https:/
merge 293975 294439
thanks
--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
Thom May (thombot) wrote : | #11 |
*** Bug 12712 has been marked as a duplicate of this bug. ***
Debian Bug Importer (debzilla) wrote : | #12 |
Message-ID: <email address hidden>
Date: Wed, 9 Feb 2005 16:34:00 -0500
From: Eric Dorland <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: Re: Processed: Re: Bug#294439: mozilla-firefox: Phishing vulnerability using IDN
forwarded 294439 https:/
merge 293975 294439
thanks
--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
In Debian Bug tracker #293975, Eric Dorland (eric-debian) wrote : severity of 293975 is important | #13 |
# Automatically generated email from bts, devscripts version 2.8.10
severity 293975 important
Debian Bug Importer (debzilla) wrote : | #14 |
Message-Id: <20050216061731
Date: Wed, 16 Feb 2005 01:17:31 -0500
From: Eric Dorland <email address hidden>
To: <email address hidden>
Subject: severity of 293975 is important
# Automatically generated email from bts, devscripts version 2.8.10
severity 293975 important
In Debian Bug tracker #293975, Joey Hess (joeyh) wrote : fixed? | #15 |
Isn't this fixed in mozilla 1.0.1, now in unstable?
--
see shy jo
Debian Bug Importer (debzilla) wrote : | #16 |
Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 14:53:39 -0500
From: Joey Hess <email address hidden>
To: <email address hidden>
Subject: fixed?
--TB36FDmn/VVEgNH/
Content-Type: text/plain; charset=us-ascii
Content-
Content-
Isn't this fixed in mozilla 1.0.1, now in unstable?
--=20
see shy jo
--TB36FDmn/VVEgNH/
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCJMhDd8H
hz6Uxk/
=CIda
-----END PGP SIGNATURE-----
--TB36FDmn/
In Debian Bug tracker #293975, Joey Hess (joeyh) wrote : Re: Bug#293975: fixed? | #17 |
Joey Hess wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
--
see shy jo
In Debian Bug tracker #293975, Eric Dorland (eric-debian) wrote : | #18 |
* Joey Hess (<email address hidden>) wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
If by fixed you mean "turned off by default", then yes. I don't really
consider that fixed though, just worked-around. Hopefully 1.1 will
have a better solution.
--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
Debian Bug Importer (debzilla) wrote : | #19 |
Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 15:45:04 -0500
From: Joey Hess <email address hidden>
To: <email address hidden>
Subject: Re: Bug#293975: fixed?
--OXfL5xGRrasGEqWY
Content-Type: text/plain; charset=us-ascii
Content-
Content-
Joey Hess wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
--=20
see shy jo
--OXfL5xGRrasGEqWY
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCJNRPd8H
nyHyQsWLqneGzBl
=/m6E
-----END PGP SIGNATURE-----
--OXfL5xGRrasGE
In Debian Bug tracker #293975, Mike Hommey (mh-glandium) wrote : | #20 |
On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> * Joey Hess (<email address hidden>) wrote:
> > Isn't this fixed in mozilla 1.0.1, now in unstable?
>
> If by fixed you mean "turned off by default", then yes. I don't really
> consider that fixed though, just worked-around. Hopefully 1.1 will
> have a better solution.
Note that in 1.0.1, it is not turned off by default. IDN addresses are
still supported, though displayed as punycode.
Mike
Debian Bug Importer (debzilla) wrote : | #21 |
Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 15:31:34 -0500
From: Eric Dorland <email address hidden>
To: Joey Hess <email address hidden>, <email address hidden>
Subject: Re: Bug#293975: fixed?
--pvezYHf7grwyp3Bc
Content-Type: text/plain; charset=us-ascii
Content-
Content-
* Joey Hess (<email address hidden>) wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
If by fixed you mean "turned off by default", then yes. I don't really
consider that fixed though, just worked-around. Hopefully 1.1 will
have a better solution.
--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------
--pvezYHf7grwyp3Bc
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCJNEmYem
Nj7XI7M9MDMbq5S
=p/v2
-----END PGP SIGNATURE-----
--pvezYHf7grwyp
Debian Bug Importer (debzilla) wrote : | #22 |
Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 22:33:42 +0100
From: Mike Hommey <email address hidden>
To: Eric Dorland <email address hidden>, <email address hidden>,
Joey Hess <email address hidden>
Subject: Re: Bug#293975: fixed?
On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> * Joey Hess (<email address hidden>) wrote:
> > Isn't this fixed in mozilla 1.0.1, now in unstable?
>
> If by fixed you mean "turned off by default", then yes. I don't really
> consider that fixed though, just worked-around. Hopefully 1.1 will
> have a better solution.
Note that in 1.0.1, it is not turned off by default. IDN addresses are
still supported, though displayed as punycode.
Mike
In Debian Bug tracker #293975, Eric Dorland (eric-dorland) wrote : | #23 |
* Mike Hommey (<email address hidden>) wrote:
> On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> > * Joey Hess (<email address hidden>) wrote:
> > > Isn't this fixed in mozilla 1.0.1, now in unstable?
> >
> > If by fixed you mean "turned off by default", then yes. I don't really
> > consider that fixed though, just worked-around. Hopefully 1.1 will
> > have a better solution.
>
> Note that in 1.0.1, it is not turned off by default. IDN addresses are
> still supported, though displayed as punycode.
Right, but the same difference. I wouldn't call that fixed.
--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
Debian Bug Importer (debzilla) wrote : | #24 |
Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 17:39:03 -0500
From: Eric Dorland <email address hidden>
To: Mike Hommey <email address hidden>
Cc: <email address hidden>, Joey Hess <email address hidden>
Subject: Re: Bug#293975: fixed?
--BRE3mIcgqKzpedwo
Content-Type: text/plain; charset=us-ascii
Content-
Content-
* Mike Hommey (<email address hidden>) wrote:
> On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> =
wrote:
> > * Joey Hess (<email address hidden>) wrote:
> > > Isn't this fixed in mozilla 1.0.1, now in unstable?
> >=20
> > If by fixed you mean "turned off by default", then yes. I don't really
> > consider that fixed though, just worked-around. Hopefully 1.1 will
> > have a better solution.
>=20
> Note that in 1.0.1, it is not turned off by default. IDN addresses are
> still supported, though displayed as punycode.
Right, but the same difference. I wouldn't call that fixed.
--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------
--BRE3mIcgqKzpedwo
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCJO8HYem
zy6RNSxIeQllgxv
=TbHo
-----END PGP SIGNATURE-----
--BRE3mIcgqKzpe
Thom May (thombot) wrote : | #25 |
Fixed in Hoary with 1.0.1-2ubuntu1 upload.
In Debian Bug tracker #293975, Eric Dorland (eric-debian) wrote : Close | #26 |
Yeah, these have been fixed for a while.
--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
Debian Bug Importer (debzilla) wrote : | #27 |
Message-ID: <email address hidden>
Date: Thu, 21 Apr 2005 01:23:20 -0400
From: Eric Dorland <email address hidden>
To: <email address hidden>
Subject: Close
--mWXp4lmU9bb5aCfX
Content-Type: text/plain; charset=us-ascii
Content-
Content-
Yeah, these have been fixed for a while.=20
--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------
--mWXp4lmU9bb5aCfX
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCZzjIYem
4Pc5rr/
=1FKY
-----END PGP SIGNATURE-----
--mWXp4lmU9bb5a
Uphaar Agrawalla (uphaar) wrote : | #28 |
This bug has been marked as a duplicate of bug 12680.
Uphaar Agrawalla (uphaar) wrote : | #29 |
My apologies, the other bug is about mozilla-browser, not mozilla-firefox.
Re-opening this one.
Martin Pitt (pitti) wrote : | #30 |
Warty was fixed in USN-149-3.
Changed in firefox: | |
status: | Unknown → Fix Released |
In Debian Bug tracker #293975, Paul Wise (Debian) (pabs) wrote : mass change old submitter address on archived bugs | #31 |
# mass change old submitter address on archived bugs
# sorry for the noise, debbugs doesn't seem to have control-quiet@
unarchive 230482
submitter 230482 !
archive 230482
unarchive 233161
submitter 233161 !
archive 233161
unarchive 287166
submitter 287166 !
archive 287166
unarchive 287167
submitter 287167 !
archive 287167
unarchive 287831
submitter 287831 !
archive 287831
unarchive 288563
submitter 288563 !
archive 288563
unarchive 287167
submitter 287167 !
archive 287167
unarchive 287166
submitter 287166 !
archive 287166
unarchive 287831
submitter 287831 !
archive 287831
unarchive 288563
submitter 288563 !
archive 288563
unarchive 288009
submitter 288009 !
archive 288009
unarchive 290471
submitter 290471 !
archive 290471
unarchive 245657
submitter 245657 !
archive 245657
unarchive 293975
submitter 293975 !
archive 293975
unarchive 294439
submitter 294439 !
archive 294439
unarchive 235325
submitter 235325 !
archive 235325
unarchive 240469
submitter 240469 !
archive 240469
unarchive 240463
submitter 240463 !
archive 240463
unarchive 287232
submitter 287232 !
archive 287232
unarchive 287234
submitter 287234 !
archive 287234
unarchive 291698
submitter 291698 !
archive 291698
unarchive 292300
submitter 292300 !
archive 292300
unarchive 292303
submitter 292303 !
archive 292303
unarchive 293285
submitter 293285 !
archive 293285
unarchive 304204
submitter 304204 !
archive 304204
unarchive 224805
submitter 224805 !
archive 224805
unarchive 246777
submitter 246777 !
archive 246777
unarchive 268794
submitter 268794 !
archive 268794
unarchive 276753
submitter 276753 !
archive 276753
unarchive 299574
submitter 299574 !
archive 299574
unarchive 244879
submitter 244879 !
archive 244879
unarchive 287841
submitter 287841 !
archive 287841
unarchive 298683
submitter 298683 !
archive 298683
unarchive 249212
submitter 249212 !
archive 249212
unarchive 308433
submitter 308433 !
archive 308433
thanks
--
bye,
pabs
In Debian Bug tracker #293975, Paul Wise (Debian) (pabs) wrote : | #32 |
# woops, fix some mistakes on merged bugs
unarchive 287831
submitter 287831 Jaap Haitsma <email address hidden>
archive 287831
unarchive 288563
submitter 288563 Y Giridhar Appaji Nag <email address hidden>
archive 288563
unarchive 294439
submitter 294439 "C. Scott Ananian"
<email address hidden>
archive 294439
unarchive 240463
submitter 240463 Roland Stigge <email address hidden>
archive 240463
--
bye,
pabs
Automatically imported from Debian bug report #293975 http:// bugs.debian. org/293975