Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org@packages.debian.org
Usertags: pu
Dear SRMs,
we would like the following two 'important' bugs in buster:
debian-edu-config (2.10.65+deb10u5) buster; urgency=medium
[ Wolfgang Schweer ]
* Add policies files for Firefox-ESR and Thunderbird to fix the TLS/SSL setup.
This makes sure that the Debian-Edu_rootCA.crt file gets installed as
trusted certificate for Firefox-ESR and Thunderbird. (Already fixed in
Bullseye.)
- Add share/firefox-esr/distribution/policies.json (Closes: #944450).
- Add lib/thunderbird/distribution/policies.json (Closes: #955978).
- Adjust Makefile accordingly.
The full debdiff is attached and I haven't uploaded yet.
Thanks for your work on Debian!
--
cheers,
Holger
-------------------------------------------------------------------------------
holger@(debian|reproducible-builds|layer-acht).org
PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
diff -Nru debian-edu-config-2.10.65+deb10u4/debian/changelog debian-edu-config-2.10.65+deb10u5/debian/changelog
--- debian-edu-config-2.10.65+deb10u4/debian/changelog 2020-01-30 17:23:38.000000000 +0100
+++ debian-edu-config-2.10.65+deb10u5/debian/changelog 2020-04-16 02:34:38.000000000 +0200
@@ -1,3 +1,16 @@
+debian-edu-config (2.10.65+deb10u5) buster; urgency=medium
+
+ [ Wolfgang Schweer ]
+ * Add policies files for Firefox-ESR and Thunderbird to fix the TLS/SSL setup.
+ This makes sure that the Debian-Edu_rootCA.crt file gets installed as
+ trusted certificate for Firefox-ESR and Thunderbird. (Already fixed in
+ Bullseye.)
+ - Add share/firefox-esr/distribution/policies.json (Closes: #944450).
+ - Add lib/thunderbird/distribution/policies.json (Closes: #955978).
+ - Adjust Makefile accordingly.
+
+ -- Holger Levsen <holger@debian.org> Thu, 16 Apr 2020 02:34:38 +0200
+
debian-edu-config (2.10.65+deb10u4) buster; urgency=medium
[ Dominik George ]
diff -Nru debian-edu-config-2.10.65+deb10u4/lib/thunderbird/distribution/policies.json debian-edu-config-2.10.65+deb10u5/lib/thunderbird/distribution/policies.json
--- debian-edu-config-2.10.65+deb10u4/lib/thunderbird/distribution/policies.json 1970-01-01 01:00:00.000000000 +0100
+++ debian-edu-config-2.10.65+deb10u5/lib/thunderbird/distribution/policies.json 2020-04-16 02:34:30.000000000 +0200
@@ -0,0 +1,11 @@
+{
+ "policies": {
+ "Certificates": {
+ "ImportEnterpriseRoots": true,
+ "Install": [
+ "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+ ]
+ }
+ }
+}
+
diff -Nru debian-edu-config-2.10.65+deb10u4/Makefile debian-edu-config-2.10.65+deb10u5/Makefile
--- debian-edu-config-2.10.65+deb10u4/Makefile 2020-01-30 16:34:52.000000000 +0100
+++ debian-edu-config-2.10.65+deb10u5/Makefile 2020-04-16 02:34:30.000000000 +0200
@@ -161,6 +161,7 @@
nbd-server/conf.d/debian-edu.conf
LIBFILES = \
+ thunderbird/distribution/policies.json \
mime/packages/debian-edu-mailcap
SYSCONFSCRIPTS = \
@@ -246,6 +247,7 @@
install -d $(DESTDIR)$(ldapdir)
install -d $(DESTDIR)$(dhcpdir)
install -d $(DESTDIR)$(mailcapdir)
+ install -d $(DESTDIR)$(libdir)
# program's manpages are autodetected.
set -e ; for prog in $(PROGS); do \
@@ -399,6 +401,7 @@
share/debian-edu-config/pam-config-mkhomedir \
share/debian-edu-config/pam-config-nopwdchange \
share/debian-edu-config/pam-nopwdchange.py \
+ share/firefox-esr/distribution/policies.json \
; do \
$(INSTALL_DATA) $$f $(DESTDIR)/usr/$$f ; \
done
diff -Nru debian-edu-config-2.10.65+deb10u4/share/firefox-esr/distribution/policies.json debian-edu-config-2.10.65+deb10u5/share/firefox-esr/distribution/policies.json
--- debian-edu-config-2.10.65+deb10u4/share/firefox-esr/distribution/policies.json 1970-01-01 01:00:00.000000000 +0100
+++ debian-edu-config-2.10.65+deb10u5/share/firefox-esr/distribution/policies.json 2020-04-16 02:34:30.000000000 +0200
@@ -0,0 +1,12 @@
+{
+ "policies": {
+ "Certificates": {
+ "ImportEnterpriseRoots": true,
+ "Install": [
+ "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+ ]
+ },
+ "NewTabPage": false,
+ "OverrideFirstRunPage": ""
+ }
+}
\ Kein Zeilenumbruch am Dateiende.
Attachment:
signature.asc
Description: PGP signature