Your message dated Tue, 23 Mar 2010 17:54:15 +0100
with message-id <[email protected]>
and subject line Re: galeon: remote info disclosure via css
has caused the Debian Bug report #560873,
regarding galeon: remote info disclosure via css
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
560873: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560873
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: galeon
version: 2.0.7-1.1
severity: serious
tags: security
hi,
it has been disclosed that it is possible for any website to query the
user's site viewing history via css. please see [0]. i have not
personally checked whether this package is vulnerable, but it seems to
be a general css design issue, so all css-supporting browsers are
likely affected. please check, and feel free to close the bug if the
package is not affected. thanks.
mike
[0]
http://thecoffeedesk.com/news/index.php/2009/08/02/view-remote-browser-history/
--- End Message ---
--- Begin Message ---
xulrunner's bug #560108.
--
Fabio Bonelli
gpg fingerprint: 61E6 5442 3BDF EA0E 2D10 35A6 971B 77D1 DA7F 0F59
--- End Message ---
