Mozilla LTSS

Hi all,

there are firefox packages available on http://mozilla.qa.ubuntu.com that need feedback before we can roll them out to the masses. If you are using dapper, edgy, feisty or gutsy on your production system or have chroots/VMs of those ubuntus you can help and make a big difference.

If you want to help, follow the instructions on the website above and provide feedback for the tests associated with each build (click on the build you want to test to see the list of tests).

If you don’t have time to do the full “testplan from https://wiki.ubuntu.com/MozillaTeam/QA” you still can help a lot by doing the “normal use (15 minutes) with NEW profile” or the “normal use (15 minutes) with existing profile” tests. Those just require you to use firefox as usual and provide us with positive feedback.

If you have any questions, ask on ubuntu-mozillateam@lists.ubuntu.com or in #ubuntu-mozillateam on irc.freenode.net.

Thanks!

... finally I got my blog up again and I start with yet another lame post

My latest security backports to the upstream abandoned mozilla 1.8.0 branch are now available at http://people.ubuntu.com/~asac/mozilla-security/moz-1.8.1.12a-backports.tar.gz.

Those patches should cover all security related fixes that landed on the 1.8 branch (firefox 2) as of 2.0.0.12 RC3.

I noticed that I didn’t really release any of the post-mortem security patches released in debian and ubuntu. So, here the patchsets for the 1.8.0 branch that contains them all:

• firefox – http://people.ubuntu.com/~asac/mozilla-security/moz-backports-ffox-all-1.8.1.12.tar.gz


• thunderbird – http://people.ubuntu.com/~asac/mozilla-security/moz-backports-tbird-all-1.8.1.12.tar.gz


• xulrunner – http://people.ubuntu.com/~asac/mozilla-security/moz-backports-xul-all-1.8.1.12.tar.gz

Those tarballs ship quilt patch directories. This means that the sequence to apply them cleanly can be found in the contained series file. To apply them to MOZILLA_1_8_0_BRANCH checkout, just copy the directory contained to your checkout (name the directory patches if you like) and run

Have fun!

mozilla-firefox 1.0.4-2sarge13 based on the backport patches I announced yesterday is now available too. You can get it from my security preview archive.

... are available for testing. firefox will be available soon.

use my security preview archive to help testing this release:

• mozilla: 1.7.8-1sarge9
• mozilla-thunderbird: 1.0.2-2.sarge1.0.8e.1

For reference: The raw patches are http://people.debian.org/~asac/backports-1.5.0.9.tar.gz

mconnor (Mozilla Corp) and caillon (Red Hat) give hope that mozillas attitude finally starts to change (in the right direction):

• mozilla admits and encourages that distribution builds are the primary way of distributing mozilla software to linux users
• linux contributors will get a chance to form a “strong group of maintainers to drive and own Linux-specific development”, which will have “responsibility for branch policies for Linux-specific code”
• in consequence, distributors will get their chance to integrate linux specific changes into stable branches in order to reduce the patchset needed

That’s all good news, but even better …

“Red Hat and Novell are both going to commit some effort into maintaining the Firefox 1.5.0.x line past the current EOL date this spring” ... thank $GOD for that

Thanks to Mike Hommey we have another set of security updates for
our mozilla apps in sarge. The versions are:

mozilla-firefox 1.0.4-2sarge13
mozilla-thunderbird 1.0.2-2.sarge1.0.8d.1
mozilla 1.7.8-1sarge8

Please use my security archive to get the preview packages and
test them as extensively as possible.

If you encounter any NEW problems, please let us know at pkg-mozilla-maintainers@lists.alioth.debian.org.

Thanks for your support.

As promissed I made available a preview package for the next mozilla-firefox security update.

The version of this prospective package is: 1.0.4-2sarge12.

If you have a sarge desktop install at hand and want to help, just add my security apt sources from http://www.asoftsite.org/apt-archives.html and upgrade/install mozilla-firefox.

Please test and send NEW bugs to me (asac@jwsdot.com) or to pkg-mozilla-maintainers@lists.alioth.debian.org.

Thanks!

I uploaded another round of security updates for mozilla and mozilla-thunderbird to my security preview archive.

The preview build for firefox will be made available from the same location in a day or two.

The versions of concern here are:

If you see any NEW bugs, let me know.

Thanks

Hi all,

we uploaded preview packages for the next security update of mozilla applications
in debian sarge.

This is the second maintenance release after mozilla foundation officially ended
support for the product versions we ship in sarge. The packages are based on the patches I
backported and announced a few days ago [1].

If you are a more or less advanced debian-sarge user (or developer) who wants to contribute and
you are using one of the mozilla apps, then please help by testing
this preview release and provide both, negative and positive feedback to pkg-mozilla-maintainers@lists.alioth.debian.org.

To test this release, please upgrade your favorite mozilla app from the sources given below.

The repository that contains the new packages can be found at http://people.debian.org/~asac/security.

The applications and versions of concern are:

• mozilla-firefox 1.0.4-2sarge10


• mozilla-thunderbird 1.0.2-2.sarge1.0.8b.1


• mozilla 1.7.8-1sarge7.2.1

You can either download the .debs manually or add the following to your apt sources.list:

deb http://people.debian.org/~asac/security ./

If you run into troubles with any of the new packages, chances are high this is due to some
extension that makes use of some corner-case feature. In order to help to track these cases down
you should disable your extensions one by one until you get rid of the problem. If you find the
extension that causes all the troubles, please don’t forget to mention its name and version.

Thanks for your support!

[1] – http://www.asoftsite.org/s9y/archives/112-Its-mozilla-patch-day!.html