Closed Bug 889112 Opened 11 years ago Closed 7 years ago

Second security code review of maintenance service and updater

Categories

(mozilla.org :: Security Assurance: Review Request, task)

Product:
mozilla.org
Component:
Security Assurance: Review Request
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: robert.strong.bugs, Assigned: dveditz)

Details

(Keywords: sec-audit)

There were several security code reviews for these two items but a couple of potential exploits made there way into the code base given the amount of security issues in this area recently. See bug 888314 and bug 888361 for reference.
Did you mean this to be an install team security audit of the code, or are you asking the security team to review it? If the latter please move the bug to the "Security Assurance: Review Request" component in the "mozilla.org" product for clarity.
Flags: needinfo?(robert.bugzilla)
Keywords: sec-audit
Component: Application Update → Security Assurance: Review Request
Flags: needinfo?(robert.bugzilla)
Product: Toolkit → mozilla.org
Version: unspecified → other
Assignee: nobody → dveditz
I don't think we need to do this at this time so wontfixing it.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
Group: core-security
You need to log in before you can comment on or make changes to this bug.