Ubuntu
firefox package

[warty] vulnerable to IDN spoofing problems

Bug #12612 reported by Debian Bug Importer
24
Affects Status Importance Assigned to Milestone
firefox (Debian)
Fix Released
Unknown
firefox (Ubuntu)
Fix Released
High
Thom May
Ubuntu ubuntu-4.10

Bug Description

Automatically imported from Debian bug report #293975 http://bugs.debian.org/293975

See original description
Revision history for this message
Debian Bug Importer (debzilla) wrote :

Automatically imported from Debian bug report #293975 http://bugs.debian.org/293975

Revision history for this message
Debian Bug Importer (debzilla) wrote :
Download full text (3.8 KiB)

Message-Id: <1107768356.28345.12.camel@localhost>
Date: Mon, 07 Feb 2005 17:25:56 +0800
From: pabs <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: mozilla-firefox: vulnerable to IDN spoofing problems

--=-LLFYNxvH7yaMdKw7T8YI
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Package: mozilla-firefox
Version: 1.0+dfsg.1-4
Severity: grave
Tags: security
Justification: user security hole

advisory: http://www.shmoo.com/idn/homograph.txt
demonstration: http://www.shmoo.com/idn/
highlights:
> I. Background
>=20
> International Domain Name [IDN] support in modern browsers allows attacke=
 rs to=20
> spoof domain name URLs + SSL certs.
> III. The details
>=20
> Proof of concept URL:
>=20
> http://www.shmoo.com/idn/
>=20
> Clicking on any of the two links in the above webpage using anything but =
 IE=20
> should result in a spoofed paypal.com webpage.

I confirm that this works on my sid machine.

> V. Workaround
>=20
> You can disable IDN support in mozilla products by setting 'network.enabl=
eIDN'=20
> to false.

I can confirm this works, but the domain not found message says
"http://www.paypal.com" cannot be found, so it isn't exactly a great
workaround.

> VI. Vendor Responses
>
> Mozilla: Working on finding a good long-term solution; provided clear=20
> workaround for disabling IDN.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-k7
Locale: LANG=3Den_AU.UTF-8, LC_CTYPE=3Den_AU.UTF-8 (charmap=3DUTF-8)

Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specif=
ic t
ii fontconfig 2.2.3-4 generic font configuration lib=
rary
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared librarie=
s an
ii libfontconfig1 2.2.3-4 generic font configuration lib=
rary
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared=
 lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.2-1 The GLib library of C routines
ii libgtk2.0-0 2.6.1-2 The GTK+ graphical user interf=
ace=20
ii libidl0 0.8.3-1 library for parsing CORBA IDL =
file
ii libjpeg62 6b-9 The Independent JPEG Group's J=
PEG=20
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of intern=
atio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v=
3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol clien=
t li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous =
exte
ii libxft2 2.1.2-6 FreeType-based font drawing li=
brar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing exten=
sion
ii libxt6 4.3.0.dfsg.1-10 X T...

Read more...

Revision history for this message
In , Frank Horowitz (frank-horowitz) wrote : mozilla-firefox: Disabling IDN support flakey.

Package: mozilla-firefox
Version: 1.0+dfsg.1-2
Followup-For: Bug #293975

As noted in the report by pabs, there is a published workaround:

> V. Workaround
> >
> > You can disable IDN support in mozilla products by setting 'network.enableIDN'
> > to false.
>
> I can confirm this works, but the domain not found message says
> "http://www.paypal.com" cannot be found, so it isn't exactly a great
> workaround.
>
>

The workaround seems to disable IDN *during the current browser session only*.

Exiting, then re-launching the browser still exhibits IDN *even though
the preference is set to false*.

This is true irrespective of whether the browser cache is cleared, one
does a shift-refresh of the page, or the preference is set by hand in
the user.js file. Basically, the preference seems to have no effect
once the browser is relaunched.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specific t
ii fontconfig 2.2.3-4 generic font configuration library
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libfontconfig1 2.2.3-4 generic font configuration library
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.1-3 The GLib library of C routines
ii libgtk2.0-0 2.4.14-2 The GTK+ graphical user interface
ii libidl0 0.8.3-1 library for parsing CORBA IDL file
ii libjpeg62 6b-9 The Independent JPEG Group's JPEG
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of internatio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii libxft2 2.1.2-6 FreeType-based font drawing librar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing extension
ii libxrender1 0.8.3-7 X Rendering Extension client libra
ii libxt6 4.3.0.dfsg.1-10 X Toolkit Intrinsics
ii psmisc 21.5-1 Utilities that use the proc filesy
ii xlibs 4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu
ii zlib1g 1:1.2.2-4 compression library - runtime

-- no debconf information

Revision history for this message
Debian Bug Importer (debzilla) wrote :
Download full text (3.2 KiB)

Message-ID: <email address hidden>
Date: Tue, 08 Feb 2005 13:04:55 +0800
From: Frank Horowitz <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: mozilla-firefox: Disabling IDN support flakey.

Package: mozilla-firefox
Version: 1.0+dfsg.1-2
Followup-For: Bug #293975

As noted in the report by pabs, there is a published workaround:

> V. Workaround
> >
> > You can disable IDN support in mozilla products by setting 'network.enableIDN'
> > to false.
>
> I can confirm this works, but the domain not found message says
> "http://www.paypal.com" cannot be found, so it isn't exactly a great
> workaround.
>
>

The workaround seems to disable IDN *during the current browser session only*.

Exiting, then re-launching the browser still exhibits IDN *even though
the preference is set to false*.

This is true irrespective of whether the browser cache is cleared, one
does a shift-refresh of the page, or the preference is set by hand in
the user.js file. Basically, the preference seems to have no effect
once the browser is relaunched.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages mozilla-firefox depends on:
ii debianutils 2.11.2 Miscellaneous utilities specific t
ii fontconfig 2.2.3-4 generic font configuration library
ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libfontconfig1 2.2.3-4 generic font configuration library
ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared lib
ii libgcc1 1:3.4.3-7 GCC support library
ii libglib2.0-0 2.6.1-3 The GLib library of C routines
ii libgtk2.0-0 2.4.14-2 The GTK+ graphical user interface
ii libidl0 0.8.3-1 library for parsing CORBA IDL file
ii libjpeg62 6b-9 The Independent JPEG Group's JPEG
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpango1.0-0 1.8.0-3 Layout and rendering of internatio
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii libxft2 2.1.2-6 FreeType-based font drawing librar
ii libxp6 4.3.0.dfsg.1-10 X Window System printing extension
ii libxrender1 0.8.3-7 X Rendering Extension client libra
ii libxt6 4.3.0.dfsg.1-10 X Toolkit Intrinsics
ii psmisc 21.5-1 Utilities that use the proc filesy
ii xlibs 4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu
ii zlib1g ...

Read more...

Revision history for this message
Thom May (thombot) wrote :

*** Bug 12652 has been marked as a duplicate of this bug. ***

Revision history for this message
In , Ralph Katz (ralph-katz-rcn) wrote : mozilla-firefox: Reference bugzilla # 279099

See Bugzilla Bug 279099
https://bugzilla.mozilla.org/show_bug.cgi?id=279099

Protect against homograph attacks (spoofing using punycode IDNs)

Revision history for this message
In , Mike Hommey (glandium) wrote : bug 293975 is forwarded to https://bugzilla.mozilla.org/show_bug.cgi?id=279099

# Automatically generated email from bts, devscripts version 2.8.10
forwarded 293975 https://bugzilla.mozilla.org/show_bug.cgi?id=279099

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 08 Feb 2005 15:02:08 -0500
From: Ralph Katz <email address hidden>
To: <email address hidden>
Subject: mozilla-firefox: Reference bugzilla # 279099

See Bugzilla Bug 279099
https://bugzilla.mozilla.org/show_bug.cgi?id=279099

Protect against homograph attacks (spoofing using punycode IDNs)

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-Id: <email address hidden>
Date: Tue, 8 Feb 2005 21:39:03 +0100
From: Mike Hommey <email address hidden>
To: <email address hidden>
Subject: bug 293975 is forwarded to https://bugzilla.mozilla.org/show_bug.cgi?id=279099

# Automatically generated email from bts, devscripts version 2.8.10
forwarded 293975 https://bugzilla.mozilla.org/show_bug.cgi?id=279099

Revision history for this message
In , Eric Dorland (eric-debian) wrote : Re: Processed: Re: Bug#294439: mozilla-firefox: Phishing vulnerability using IDN

forwarded 294439 https://bugzilla.mozilla.org/show_bug.cgi?id=279099
merge 293975 294439
thanks

--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------

Revision history for this message
Thom May (thombot) wrote :

*** Bug 12712 has been marked as a duplicate of this bug. ***

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Wed, 9 Feb 2005 16:34:00 -0500
From: Eric Dorland <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: Re: Processed: Re: Bug#294439: mozilla-firefox: Phishing vulnerability using IDN

forwarded 294439 https://bugzilla.mozilla.org/show_bug.cgi?id=279099
merge 293975 294439
thanks

--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------

Revision history for this message
In , Eric Dorland (eric-debian) wrote : severity of 293975 is important

# Automatically generated email from bts, devscripts version 2.8.10
severity 293975 important

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-Id: <20050216061731.2E5545CAE59@nightcrawler>
Date: Wed, 16 Feb 2005 01:17:31 -0500
From: Eric Dorland <email address hidden>
To: <email address hidden>
Subject: severity of 293975 is important

# Automatically generated email from bts, devscripts version 2.8.10
severity 293975 important

Revision history for this message
In , Joey Hess (joeyh) wrote : fixed?

Isn't this fixed in mozilla 1.0.1, now in unstable?

--
see shy jo

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 14:53:39 -0500
From: Joey Hess <email address hidden>
To: <email address hidden>
Subject: fixed?

--TB36FDmn/VVEgNH/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Isn't this fixed in mozilla 1.0.1, now in unstable?

--=20
see shy jo

--TB36FDmn/VVEgNH/
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCJMhDd8HHehbQuO8RAmySAJ99jtiPW/5l/tRoddcvDt5m+3GBjwCgyXPX
hz6Uxk/qfXwBqo4cHtFZ354=
=CIda
-----END PGP SIGNATURE-----

--TB36FDmn/VVEgNH/--

Revision history for this message
In , Joey Hess (joeyh) wrote : Re: Bug#293975: fixed?

Joey Hess wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
                       ^^^^^^^^
                      firefox

--
see shy jo

Revision history for this message
In , Eric Dorland (eric-debian) wrote :

* Joey Hess (<email address hidden>) wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?

If by fixed you mean "turned off by default", then yes. I don't really
consider that fixed though, just worked-around. Hopefully 1.1 will
have a better solution.

--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 15:45:04 -0500
From: Joey Hess <email address hidden>
To: <email address hidden>
Subject: Re: Bug#293975: fixed?

--OXfL5xGRrasGEqWY
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Joey Hess wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?
                       ^^^^^^^^
                      firefox

--=20
see shy jo

--OXfL5xGRrasGEqWY
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCJNRPd8HHehbQuO8RAo26AJ0dj7hFA9Ta5QMJz1sBibtggULrRgCfcjkj
nyHyQsWLqneGzBlP6t8R0IM=
=/m6E
-----END PGP SIGNATURE-----

--OXfL5xGRrasGEqWY--

Revision history for this message
In , Mike Hommey (mh-glandium) wrote :

On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> * Joey Hess (<email address hidden>) wrote:
> > Isn't this fixed in mozilla 1.0.1, now in unstable?
>
> If by fixed you mean "turned off by default", then yes. I don't really
> consider that fixed though, just worked-around. Hopefully 1.1 will
> have a better solution.

Note that in 1.0.1, it is not turned off by default. IDN addresses are
still supported, though displayed as punycode.

Mike

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 15:31:34 -0500
From: Eric Dorland <email address hidden>
To: Joey Hess <email address hidden>, <email address hidden>
Subject: Re: Bug#293975: fixed?

--pvezYHf7grwyp3Bc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Joey Hess (<email address hidden>) wrote:
> Isn't this fixed in mozilla 1.0.1, now in unstable?

If by fixed you mean "turned off by default", then yes. I don't really
consider that fixed though, just worked-around. Hopefully 1.1 will
have a better solution.

--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------

--pvezYHf7grwyp3Bc
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCJNEmYemOzxbZcMYRAoDHAJ4588FU7Vj2IrwkkRQu/JN912zdQACgi0SR
Nj7XI7M9MDMbq5S+s/BtRzk=
=p/v2
-----END PGP SIGNATURE-----

--pvezYHf7grwyp3Bc--

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 22:33:42 +0100
From: Mike Hommey <email address hidden>
To: Eric Dorland <email address hidden>, <email address hidden>,
 Joey Hess <email address hidden>
Subject: Re: Bug#293975: fixed?

On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> * Joey Hess (<email address hidden>) wrote:
> > Isn't this fixed in mozilla 1.0.1, now in unstable?
>
> If by fixed you mean "turned off by default", then yes. I don't really
> consider that fixed though, just worked-around. Hopefully 1.1 will
> have a better solution.

Note that in 1.0.1, it is not turned off by default. IDN addresses are
still supported, though displayed as punycode.

Mike

Revision history for this message
In , Eric Dorland (eric-dorland) wrote :

* Mike Hommey (<email address hidden>) wrote:
> On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> wrote:
> > * Joey Hess (<email address hidden>) wrote:
> > > Isn't this fixed in mozilla 1.0.1, now in unstable?
> >
> > If by fixed you mean "turned off by default", then yes. I don't really
> > consider that fixed though, just worked-around. Hopefully 1.1 will
> > have a better solution.
>
> Note that in 1.0.1, it is not turned off by default. IDN addresses are
> still supported, though displayed as punycode.

Right, but the same difference. I wouldn't call that fixed.

--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Tue, 1 Mar 2005 17:39:03 -0500
From: Eric Dorland <email address hidden>
To: Mike Hommey <email address hidden>
Cc: <email address hidden>, Joey Hess <email address hidden>
Subject: Re: Bug#293975: fixed?

--BRE3mIcgqKzpedwo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Mike Hommey (<email address hidden>) wrote:
> On Tue, Mar 01, 2005 at 03:31:34PM -0500, Eric Dorland <email address hidden> =
 wrote:
> > * Joey Hess (<email address hidden>) wrote:
> > > Isn't this fixed in mozilla 1.0.1, now in unstable?
> >=20
> > If by fixed you mean "turned off by default", then yes. I don't really
> > consider that fixed though, just worked-around. Hopefully 1.1 will
> > have a better solution.
>=20
> Note that in 1.0.1, it is not turned off by default. IDN addresses are
> still supported, though displayed as punycode.

Right, but the same difference. I wouldn't call that fixed.

--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------

--BRE3mIcgqKzpedwo
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCJO8HYemOzxbZcMYRAso9AJoCb1ETU4MoMlUD263Jvo+ZFPi5ngCgj66p
zy6RNSxIeQllgxvgDOA8UkA=
=TbHo
-----END PGP SIGNATURE-----

--BRE3mIcgqKzpedwo--

Revision history for this message
Thom May (thombot) wrote :

Fixed in Hoary with 1.0.1-2ubuntu1 upload.

Revision history for this message
In , Eric Dorland (eric-debian) wrote : Close

Yeah, these have been fixed for a while.

--
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Thu, 21 Apr 2005 01:23:20 -0400
From: Eric Dorland <email address hidden>
To: <email address hidden>
Subject: Close

--mWXp4lmU9bb5aCfX
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Yeah, these have been fixed for a while.=20

--=20
Eric Dorland <email address hidden>
ICQ: #61138586, Jabber: <email address hidden>
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+=20
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+=20
G e h! r- y+=20
------END GEEK CODE BLOCK------

--mWXp4lmU9bb5aCfX
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCZzjIYemOzxbZcMYRApWcAJ9pvDQGD1HzYtTbltDLcAXPPo0rIQCfQPzF
4Pc5rr/6T3ehgmOAjOD2aw0=
=1FKY
-----END PGP SIGNATURE-----

--mWXp4lmU9bb5aCfX--

Revision history for this message
Uphaar Agrawalla (uphaar) wrote :

This bug has been marked as a duplicate of bug 12680.

Revision history for this message
Uphaar Agrawalla (uphaar) wrote :

My apologies, the other bug is about mozilla-browser, not mozilla-firefox.
Re-opening this one.

Revision history for this message
Martin Pitt (pitti) wrote :

Warty was fixed in USN-149-3.

Bug Watch Updater (bug-watch-updater)
Changed in firefox:
status: Unknown → Fix Released
Revision history for this message
In , Paul Wise (Debian) (pabs) wrote : mass change old submitter address on archived bugs

# mass change old submitter address on archived bugs
# sorry for the noise, debbugs doesn't seem to have control-quiet@
unarchive 230482
submitter 230482 !
archive 230482
unarchive 233161
submitter 233161 !
archive 233161
unarchive 287166
submitter 287166 !
archive 287166
unarchive 287167
submitter 287167 !
archive 287167
unarchive 287831
submitter 287831 !
archive 287831
unarchive 288563
submitter 288563 !
archive 288563
unarchive 287167
submitter 287167 !
archive 287167
unarchive 287166
submitter 287166 !
archive 287166
unarchive 287831
submitter 287831 !
archive 287831
unarchive 288563
submitter 288563 !
archive 288563
unarchive 288009
submitter 288009 !
archive 288009
unarchive 290471
submitter 290471 !
archive 290471
unarchive 245657
submitter 245657 !
archive 245657
unarchive 293975
submitter 293975 !
archive 293975
unarchive 294439
submitter 294439 !
archive 294439
unarchive 235325
submitter 235325 !
archive 235325
unarchive 240469
submitter 240469 !
archive 240469
unarchive 240463
submitter 240463 !
archive 240463
unarchive 287232
submitter 287232 !
archive 287232
unarchive 287234
submitter 287234 !
archive 287234
unarchive 291698
submitter 291698 !
archive 291698
unarchive 292300
submitter 292300 !
archive 292300
unarchive 292303
submitter 292303 !
archive 292303
unarchive 293285
submitter 293285 !
archive 293285
unarchive 304204
submitter 304204 !
archive 304204
unarchive 224805
submitter 224805 !
archive 224805
unarchive 246777
submitter 246777 !
archive 246777
unarchive 268794
submitter 268794 !
archive 268794
unarchive 276753
submitter 276753 !
archive 276753
unarchive 299574
submitter 299574 !
archive 299574
unarchive 244879
submitter 244879 !
archive 244879
unarchive 287841
submitter 287841 !
archive 287841
unarchive 298683
submitter 298683 !
archive 298683
unarchive 249212
submitter 249212 !
archive 249212
unarchive 308433
submitter 308433 !
archive 308433
thanks

--
bye,
pabs

http://wiki.debian.org/PaulWise

Revision history for this message
In , Paul Wise (Debian) (pabs) wrote :

# woops, fix some mistakes on merged bugs
unarchive 287831
submitter 287831 Jaap Haitsma <email address hidden>
archive 287831
unarchive 288563
submitter 288563 Y Giridhar Appaji Nag <email address hidden>
archive 288563
unarchive 294439
submitter 294439 "C. Scott Ananian"
<email address hidden>
archive 294439
unarchive 240463
submitter 240463 Roland Stigge <email address hidden>
archive 240463

--
bye,
pabs

http://wiki.debian.org/PaulWise

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.