Alexander Sack (asac)'s software site

Wednesday, June 28. 2006

Posted by asac (Alexander Sack) in Debian OS at 15:10 | Comment (1) | Trackbacks (0)

2nd proposed mozilla suite security update for sarge uploaded

You can get a second proposed security build for mozilla suite from my security archive. Version is 2:1.7.8-1sarge7.1.

The last one I released in this blog entry contained a serious regression, making all bookmark folders displaying as empty.

In order to fix this regression, I added two more patches for issue CVE-2006-2775. So now this issue comprises three patches:

CODE:

1_0005-mfsa2006-35-329677.txt
1_0023-mfsa2006-35-335142-regression-1-2-for-329677.txt
1_0024-mfsa2006-35-337841-regression-part-2-2-for-329677.txt

Monday, June 26. 2006

Posted by asac (Alexander Sack) in Debian OS at 21:14 | Comments (0) | Trackbacks (0)

maintenance of enigmail package for debian mozilla (mozilla-engimail) suspended.

Sorry for any inconvenience, but until seamonkey ships into port debian, I won’t provide an enigmail package for mozilla-suite anymore.

So here the rational for this step:

Mozilla upstream is dead … e.g. mozilla foundation does not release updates for the Mozilla suite anymore. Thus, maintaining mozilla-enigmail is suspended for now. In fact mozilla 1.7.x will be removed from debian before release of etch.

So I suggest that now its a good time to switch to thunderbird and firefox for the time being.

To get thunderbird and enigmail an

CODE:

apt-get install thunderbird enigmail

would suffice.

Anyway, maybe you like to hear that there might be a package for seamonkey [1] at some point in the not so far future [2].

Sorry for any inconvenience .

[1] – http://www.mozilla.org/projects/seamonkey/
[2] – http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350740

Saturday, June 17. 2006

Posted by asac (Alexander Sack) in Debian OS at 13:41 | Comments (0) | Trackbacks (0)

proposed mozilla suite security update for sarge uploaded

You can get a proposed update for mozilla suite from my security archive. Version is 2:1.7.8-1sarge7.

Please test if you see any bad regressions.

Here the changelog:

CODE:

mozilla (2:1.7.8-1sarge7) stable-security; urgency=critical
   - added mozilla 1.7.14 patches in debian/patches that fix various
     security issues:
     + CVE-2006-2787     : 1_0001-mfsa2006-31-319263-336601-336313.txt
     + CVE-2006-2786 1/2 : 1_0002-mfsa2006-33-Part-1-2-329746.txt
     + CVE-2006-2786 2/2 : 1_0003-mfsa2006-33-Part-2-2-330214.txt
     + CVE-2006-2785 2/2 : 1_0004-mfsa2006-34-Part2-2-329521-suite.txt
     + CVE-2006-2775     : 1_0005-mfsa2006-35-329677.txt
     + CVE-2006-2784     : 1_0006-mfsa2006-36-330037.txt
     + CVE-2006-2776     : 1_0007-mfsa2006-37-330773-with-belt-and-braces.txt
     + CVE-2006-2778     : 1_0008-mfsa2006-38-330897.txt
     + CVE-2006-1942     : 1_0009-mfsa2006-39-CVE-2006-1942-334341-suite.txt
     + CVE-2006-2781     : 1_0010-mfsa2006-40-334384.txt
     + CVE-2006-2782     : 1_0011-mfsa2006-41-334977.txt
     + CVE-2006-2783     : 1_0012-mfsa2006-42-335816.txt
     + CVE-2006-2777     : 1_0013-mfsa2006-43-336830.txt
     + CVE-2006-2779 3/6 : 1_0014-mfsa2006-32-Part-3-7-326501.txt
     + CVE-2006-2779 4/6 : 1_0015-mfsa2006-32-Part-4a-7-326931.txt
     + CVE-2006-2785 2/2 : 1_0015-mfsa2006-34-Part-1-2-xpfe-329468-suite.txt
     + CVE-2006-2779 4/6 : 1_0016-mfsa2006-32-Part-4b-7-329219.txt
     + CVE-2006-2779 4/6 : 1_0017-mfsa2006-32-Part-4c-7-330818-proper-aviary.txt
     + CVE-2006-2779 6/6 : 1_0018-mfsa2006-32-Part-6-7-332971.txt
     + CVE-2006-2780     : 1_0019-js-src-jsstr.c-335535-mfsa2006-32-Part-7-7.txt
     + CVE-2006-2779 5/6 : 1_0021-mfsa2006-32-Part-5-7-327712.txt
   - Note: CVE-2006-2779 (mfsa2006-32) is only partially fixed. Missing are
     tricky parts 1/6 and 2/6 from advisory:
      1/6: Removing nested <option>s from a select (Jesse Ruderman)
        https://bugzilla.mozilla.org/show_bug.cgi?id=324918
      2/6: ’Crashes during DOMNodeRemoved mutation event’
        https://bugzilla.mozilla.org/show_bug.cgi?id=325730
        https://bugzilla.mozilla.org/show_bug.cgi?id=329982

(Page 1 of 1, totaling 3 entries)