Re: [SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities
Hello,
didn't know where to file this issue to, I hope this is the right place:
DSA 1134-1 introduces unnecessary dependencies on various gnome packages
for the i386 architecture, that prevent an 'apt-get upgrade' from succeeding
on a gnome-free installation. This issue is not present for, e.g., amd64,
so those dependencies are obviously erroneous and should be fixed.
Thanks & Best regards,
Knut Vietze
----------------------------------------
i386: apt-cache show mozilla-thunderbird
Package: mozilla-thunderbird
Priority: optional
Section: mail
Installed-Size: 33011
Maintainer: Alexander Sack <asac@debian.org>
Architecture: i386
Version: 1.0.2-2.sarge1.0.8a
Provides: mail-reader, imap-client
Depends: bash, libatk1.0-0 (>= 1.7.2), libbonobo2-0 (>= 2.8.0), libc6 (>= 2.3.2.ds1-21), libfontconfig1 (>= 2.3.0), libfreetype6 (>=
2.1.5-1), libgcc1 (>= 1:3.4.1-3), libgconf2-4 (>= 2.8.1), libglib2.0-0 (>= 2.6.0), libgnome2-0 (>= 2.8.0), libgnomevfs2-0 (>=
2.8.3-7), libgtk2.0-0 (>= 2.6.0), libjpeg62, liborbit2 (>= 1:2.10.0), libpango1.0-0 (>= 1.8.1), libpng12-0 (>= 1.2.8rel), libpopt0
(>= 1.7), libstdc++5 (>= 1:3.3.4-1), libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0), libxft2 (>> 2.1.1), libxp6
| xlibs (>> 4.1.0), libxrender1, libxt6 | xlibs (>> 4.1.0), zlib1g (>= 1:1.2.1)
Recommends: myspell-en-us | myspell-dictionary, xprint
Suggests: mozilla-thunderbird-offline, mozilla-thunderbird-typeaheadfind, mozilla-thunderbird-inspector, mozilla-firefox,
ttf-bitstream-vera, ttf-freefont, mozilla-thunderbird-enigmail
Filename: pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_i386.deb
Size: 11565160
MD5sum: 23e9aaa2f8f1a62bf43efb7bc815fdcf
SHA1: 646ea79670eb8eb92092d4e3ea406de5c8977ae0
SHA256: 1097579854e67630422b14e074671e0fba6b6bccb142ca87ffd3de50169505de
Description: Mozilla Thunderbird standalone mail client
Mozilla Thunderbird is a redesign of the Mozilla mail component. The
goal is to produce a cross platform stand alone mail application using
the XUL user interface language. Mozilla Thunderbird leaves a somewhat
smaller memory footprint than the Mozilla suite.
Package: mozilla-thunderbird
Priority: optional
Section: mail
Installed-Size: 32971
Maintainer: Alexander Sack <asac@debian.org>
Architecture: i386
Version: 1.0.2-2.sarge1.0.7
Provides: mail-reader, imap-client
Depends: bash, libatk1.0-0 (>= 1.7.2), libc6 (>= 2.3.2.ds1-21), libfontconfig1 (>= 2.3.0), libfreetype6 (>= 2.1.5-1), libgcc1 (>=
1:3.4.1-3), libglib2.0-0 (>= 2.6.0), libgtk2.0-0 (>= 2.6.0), libjpeg62, libpango1.0-0 (>= 1.8.1), libpng12-0 (>= 1.2.8rel),
libstdc++5 (>= 1:3.3.4-1), libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0), libxft2 (>> 2.1.1), libxp6 | xlibs (>> 4.1.0),
libxrender1, libxt6 | xlibs (>> 4.1.0), zlib1g (>= 1:1.2.1)
Recommends: myspell-en-us | myspell-dictionary, xprint
Suggests: mozilla-thunderbird-offline, mozilla-thunderbird-typeaheadfind, mozilla-thunderbird-inspector, mozilla-firefox,
ttf-bitstream-vera, ttf-freefont, mozilla-thunderbird-enigmail
Filename: pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.7_i386.deb
Size: 11550326
MD5sum: fc8572c0a89b914fc288fd638e224213
Description: Mozilla Thunderbird standalone mail client
Mozilla Thunderbird is a redesign of the Mozilla mail component. The
goal is to produce a cross platform stand alone mail application using
the XUL user interface language. Mozilla Thunderbird leaves a somewhat
smaller memory footprint than the Mozilla suite.
-----------------------------------------
amd64: apt-cache show mozilla-thunderbird
Package: mozilla-thunderbird
Priority: optional
Section: mail
Installed-Size: 37520
Maintainer: Alexander Sack <asac@debian.org>
Architecture: amd64
Version: 1.0.2-2.sarge1.0.8a
Provides: mail-reader, imap-client
Depends: bash, libatk1.0-0 (>= 1.7.2), libc6 (>= 2.3.2.ds1-21), libfontconfig1 (>= 2.3.0), libfreetype6 (>= 2.1.5-1), libgcc1 (>=
1:3.4.1-3), libglib2.0-0 (>= 2.6.0), libgtk2.0-0 (>= 2.6.0), libjpeg62, libpango1.0-0 (>= 1.8.1), libpng12-0 (>= 1.2.8rel),
libstdc++6 (>= 3.4.3-1), libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0), libxft2 (>> 2.1.1), libxp6 | xlibs (>> 4.1.0),
libxrender1, libxt6 | xlibs (>> 4.1.0), zlib1g (>= 1:1.2.1)
Recommends: myspell-en-us | myspell-dictionary, xprint
Suggests: mozilla-thunderbird-offline, mozilla-thunderbird-typeaheadfind, mozilla-thunderbird-inspector, mozilla-firefox,
ttf-bitstream-vera, ttf-freefont, mozilla-thunderbird-enigmail
Filename: pool/updates/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.8a_amd64.deb
Size: 12251804
MD5sum: deb4396f8cd09c132ff78052ff534f8a
SHA1: 64a46b46c14344f16a2e80735705da6b654e8c83
SHA256: 7e4c1c9ffbc2e9138b326ef3f25ddcfeb996c829433d19f00d3401bacd4f1564
Description: Mozilla Thunderbird standalone mail client
Mozilla Thunderbird is a redesign of the Mozilla mail component. The
goal is to produce a cross platform stand alone mail application using
the XUL user interface language. Mozilla Thunderbird leaves a somewhat
smaller memory footprint than the Mozilla suite.
Package: mozilla-thunderbird
Priority: optional
Section: mail
Installed-Size: 37516
Maintainer: Alexander Sack <asac@debian.org>
Architecture: amd64
Version: 1.0.2-2.sarge1.0.7
Provides: mail-reader, imap-client
Depends: bash, libatk1.0-0 (>= 1.7.2), libc6 (>= 2.3.2.ds1-21), libfontconfig1 (>= 2.3.0), libfreetype6 (>= 2.1.5-1), libgcc1 (>=
1:3.4.1-3), libglib2.0-0 (>= 2.6.0), libgtk2.0-0 (>= 2.6.0), libjpeg62, libpango1.0-0 (>= 1.8.1), libpng12-0 (>= 1.2.8rel),
libstdc++6 (>= 3.4.3-1), libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0), libxft2 (>> 2.1.1), libxp6 | xlibs (>> 4.1.0),
libxrender1, libxt6 | xlibs (>> 4.1.0), zlib1g (>= 1:1.2.1)
Recommends: myspell-en-us | myspell-dictionary, xprint
Suggests: mozilla-thunderbird-offline, mozilla-thunderbird-typeaheadfind, mozilla-thunderbird-inspector, mozilla-firefox,
ttf-bitstream-vera, ttf-freefont, mozilla-thunderbird-enigmail
Filename: pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.2-2.sarge1.0.7_amd64.deb
Size: 12240810
MD5sum: 5ac70842faf52d027c0376bc5d4f60e5
Description: Mozilla Thunderbird standalone mail client
Mozilla Thunderbird is a redesign of the Mozilla mail component. The
goal is to produce a cross platform stand alone mail application using
the XUL user interface language. Mozilla Thunderbird leaves a somewhat
smaller memory footprint than the Mozilla suite.
--
</knut>
____________________
No RISC - No Fun
Reply to: