[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Preparation of the next stable Debian GNU/Linux update (I)



Martin Zobel-Helas wrote:

> libnspr-dev            stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnspr-dev            updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnspr4               stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnspr4               updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnss-dev             stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnss-dev             updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnss3                stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> libnss3                updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-browser        stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-browser        updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-calendar       stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-calendar       updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-chatzilla      stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-chatzilla      updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-dev            stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-dev            updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-dom-inspector  stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-dom-inspector  updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-js-debugger    stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-js-debugger    updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-mailnews       stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-mailnews       updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-psm            stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-psm            updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla                stable    2:1.7.8-1sarge3    alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> mozilla                updates   2:1.7.8-1sarge7.1  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> 
> 	DSA 1046 mozilla - several vulnerabilities
> 	DSA 1053 mozilla - programming error
> 	DSA 1118 mozilla - several vulnerabilities
> 
> mozilla-firefox-dom-inspector  stable    1.0.4-2sarge4  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-firefox-dom-inspector  updates   1.0.4-2sarge9  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-firefox-gnome-support  stable    1.0.4-2sarge4  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-firefox-gnome-support  updates   1.0.4-2sarge9  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-firefox                stable    1.0.4-2sarge4  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> mozilla-firefox                updates   1.0.4-2sarge9  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> 
> 	DSA 1044 mozilla-firefox - several vulnerabilities
> 	DSA 1055 mozilla-firefox - programming error
> 	DSA 1120 mozilla-firefox - several vulnerabilities
> 
> mozilla-thunderbird-dev            stable    1.0.2-2.sarge1.0.7   alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-dev            updates   1.0.2-2.sarge1.0.8a  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-inspector      stable    1.0.2-2.sarge1.0.7   alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-inspector      updates   1.0.2-2.sarge1.0.8a  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-offline        stable    1.0.2-2.sarge1.0.7   alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-offline        updates   1.0.2-2.sarge1.0.8a  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-typeaheadfind  stable    1.0.2-2.sarge1.0.7   alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird-typeaheadfind  updates   1.0.2-2.sarge1.0.8a  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
> mozilla-thunderbird                stable    1.0.2-2.sarge1.0.7   alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> mozilla-thunderbird                updates   1.0.2-2.sarge1.0.8a  alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
> 
> 	DSA 1051 mozilla-thunderbird - several vulnerabilities

First of all, the above should also mention DSA 1134.

Second, is it planned to include the next round of security updates to
the Mozilla family by Alexander Sack?  (cf. [0] [1])  For some reason
these don't seem to have gone into security.d.o yet and it would be very
nice to ship mozilla* packages that are up-to-date with security fixes.

Third, please note that even if those updates don't get into Sarge r3,
the existing mozilla-thunderbird security update needs a bin-NMU on i386
[2].

CC'ed to Alexander.

[0]
http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/2006-August/000399.html
[1]
http://www.asoftsite.org/s9y/archives/113-Please-test-firefoxthunderbirdmozilla-security-packages.html
[2] http://lists.debian.org/debian-security/2006/08/msg00023.html

regards,

-- 
Kevin B. McCarty <kmccarty@princeton.edu>   Physics Department
WWW: http://www.princeton.edu/~kmccarty/    Princeton University
GPG: public key ID 4F83C751                 Princeton, NJ 08544



Reply to: