[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security updates for mozilla based software [Was: Security updates]



Eric Dorland wrote:
Alexander Sack wrote:
On Sun, Dec 24, 2006 at 01:43:40PM +0100, Mike Hommey wrote:
Oops, I decided to follow-up to debian-release after setting the subject
and forgot to change it. So, here is a proper subject.

On Sun, Dec 24, 2006 at 01:40:37PM +0100, Mike Hommey <mh@glandium.org> wrote:
Hi

I see Alex has uploaded version 1.5.0.9 of icedove. What should we take
as a course of action for xulrunner, iceweasel and iceape ?
Should we go with newer upstreams (note there's no official xulrunner
release, but I fake them taking from tags in upstream cvs) or backport
security fixes ?


Please lets upload new upstream versions as long as possible - e.g. as
long as etch is not released. Those are just minor upstream version
shifts, so taking them entirely should be pretty safe imo.

Right, I agree. In fact I'm building 2.0.0.1 packages right now on my laptop, but I might need you to sign and upload them Mike. Sorry it's taken me a while, life's been very busy the last month.

In fact I am away from my gpg key, so if you could sign & upload the package at http://people.debian.org/~eric/iceweasel/. New iceweasel package for christmas :)



Reply to: