Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package iceweasel The new version fixes various security issues. The diff between the previous upstream version and this one is quite big and probably hard to review, especially as it adds a third party library (ots, a sanitizer for opentype fonts, which is part of CVE-2010-3768). I think we can trust upstream with these changes (and any big regression will be fixed in a subsequent release, anyways), but this release doesn't stop at security updates, so here is a list of the upstream commits that are also part of this release (I'm purposely skipping commits touching version strings and tags, and stuff that's not part of the build, such as tools and tests): - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/a78a9ff14f26 (note that this one was applied as a patch in previous debian releases) - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/c309d22b23d6 - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0fe7a05219fd (this one is a fix for a regression from CVE-2010-2769, I also applied it to the stable-security update) - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/16357bcadb6f - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/330f0bd7693c - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/0d5d5e39844b - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f807c68b55c4 - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/177a7eab1180 - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/5b998a2bfcc3 - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/19e3f097936a - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/f43d4cdbe257 - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8d9e038d30bf - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/8f70e404d1ee - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/7da8e189105d - http://hg.mozilla.org/releases/mozilla-1.9.1/rev/612ad84a4004 unblock iceweasel/3.5.16-1 -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
