Re: [SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities

[Matthew Garrett <mgarrett@chiark.greenend.org.uk>]

(From debian-security-announce)

Martin Schulze <joey@infodrom.org> wrote:

> Several problems have been discovered in Mozilla, the we browser of
> the Mozilla suite.  Since the usual praxis of backporting apparently
> does not work for this package, this update is basically version
> 1.7.10 with the version number rolled back, and hence still named
> 1.7.8.  The Common Vulnerabilities and Exposures project identifies
> the following problems:

Hmm. Is this really a good idea? I can see that the Mozilla developers
give us no real option other than to ship a newer version, but if that's
what we're doing then changing the version number back seems a bit odd.

-- 
Matthew Garrett | mjg59-chiark.mail.debian.security.announce@srcf.ucam.org