Bug#606651: marked as done (unblock: iceweasel/3.5.16-1)
Your message dated Fri, 10 Dec 2010 21:14:02 +0100
with message-id <4D028A0A.50907@dogguy.org>
and subject line Re: Bug#606651: unblock: iceweasel/3.5.16-1
has caused the Debian Bug report #606651,
regarding unblock: iceweasel/3.5.16-1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
606651: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606651
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package iceweasel
The new version fixes various security issues. The diff between
the previous upstream version and this one is quite big and probably
hard to review, especially as it adds a third party library (ots, a
sanitizer for opentype fonts, which is part of CVE-2010-3768). I
think we can trust upstream with these changes (and any big regression
will be fixed in a subsequent release, anyways), but this release
doesn't stop at security updates, so here is a list of the upstream
commits that are also part of this release (I'm purposely skipping
commits touching version strings and tags, and stuff that's not part
of the build, such as tools and tests):
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/a78a9ff14f26
(note that this one was applied as a patch in previous debian releases)
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/c309d22b23d6
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0fe7a05219fd
(this one is a fix for a regression from CVE-2010-2769, I also applied
it to the stable-security update)
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/16357bcadb6f
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/330f0bd7693c
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0d5d5e39844b
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f807c68b55c4
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/177a7eab1180
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/5b998a2bfcc3
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/19e3f097936a
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f43d4cdbe257
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8d9e038d30bf
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8f70e404d1ee
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/7da8e189105d
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/612ad84a4004
unblock iceweasel/3.5.16-1
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
On 10/12/2010 16:16, Mike Hommey wrote:
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package iceweasel
The new version fixes various security issues. The diff between
the previous upstream version and this one is quite big and probably
hard to review, especially as it adds a third party library (ots, a
sanitizer for opentype fonts, which is part of CVE-2010-3768). I
think we can trust upstream with these changes (and any big regression
will be fixed in a subsequent release, anyways), but this release
doesn't stop at security updates, so here is a list of the upstream
commits that are also part of this release (I'm purposely skipping
commits touching version strings and tags, and stuff that's not part
of the build, such as tools and tests):
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/a78a9ff14f26
(note that this one was applied as a patch in previous debian releases)
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/c309d22b23d6
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0fe7a05219fd
(this one is a fix for a regression from CVE-2010-2769, I also applied
it to the stable-security update)
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/16357bcadb6f
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/330f0bd7693c
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0d5d5e39844b
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f807c68b55c4
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/177a7eab1180
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/5b998a2bfcc3
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/19e3f097936a
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f43d4cdbe257
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8d9e038d30bf
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8f70e404d1ee
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/7da8e189105d
- http://hg.mozilla.org/releases/mozilla-1.9.1/rev/612ad84a4004
unblock iceweasel/3.5.16-1
Unblocked.
Regards,
--
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/
--- End Message ---
Reply to: