Your message dated Thu, 30 Jul 2009 09:53:23 +0000
with message-id <e1mwskb-0005tp...@ries.debian.org>
and subject line Bug#512111: fixed in xulrunner 1.9.1.1-2
has caused the Debian Bug report #512111,
regarding iceweasel: Iceweasel disable Firefox upgrade checks
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
512111: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512111
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: iceweasel
Version: 3.0.5-1
Severity: grave
Tags: security
Justification: user security hole
Since Debian stable is a "frozen" distro, it's not uncommon to install
the official Firefox binaries when the next version of Firefox is
released, and isn't packaged in stable or backported yet. I've also
also seen that useful to fix browser detection (hotmail) or support
binary extensions (probably to avoid stdlibc++ 5/6 discrepancies).
Anyway, when Iceweasel is started, it silently disables the security
update checks in the configuration.
"about:config" reports that 'app.update.enabled' is set to false. This
is set on startup.
This is a problem, because as I mentioned people may use, concurrently
or later, an official version of Firefox. In this case, Firefox will
disable security update checks as directed, and thus Firefox won't be
upgraded when there's a security fix. People may work several months
without being notified about a security hole in their Firefox.
The fact Iceweasel disables upsteam security update checks is normal,
because Debian (not upstream) provides those. However it's a mistake
to disable that in the configuration, because this impacts other
versions of Firefox that do use those checks.
So please don't alter 'app.update.enabled' and other settings, and
disable Iceweasel upstream security updates checks using another
method (e.g. by not compiling the related code, or by not using
~/.mozilla/firefox to store the iceweasel configuration).
-- System Information:
Debian Release: 5.0
APT prefers testing
APT policy: (500, 'testing'), (300, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-1-vserver-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages iceweasel depends on:
ii debianutils 2.30 Miscellaneous utilities specific t
ii fontconfig 2.6.0-3 generic font configuration library
ii libc6 2.7-16 GNU C Library: Shared libraries
ii libgcc1 1:4.3.2-1.1 GCC support library
ii libglib2.0-0 2.16.6-1 The GLib library of C routines
ii libgtk2.0-0 2.12.11-4 The GTK+ graphical user interface
ii libnspr4-0d 4.7.1-4 NetScape Portable Runtime Library
ii libstdc++6 4.3.2-1.1 The GNU Standard C++ Library v3
ii procps 1:3.2.7-9 /proc file system utilities
ii psmisc 22.6-1 Utilities that use the proc filesy
ii xulrunner-1.9 1.9.0.5-1 XUL + XPCOM application runner
iceweasel recommends no packages.
Versions of packages iceweasel suggests:
pn latex-xft-fonts <none> (no description available)
ii libkrb53 1.6.dfsg.4~beta1-5 MIT Kerberos runtime libraries
pn mozplugger <none> (no description available)
pn ttf-mathematica4.1 <none> (no description available)
pn xfonts-mathml <none> (no description available)
pn xprint <none> (no description available)
ii xulrunner-1.9-gnome-s 1.9.0.5-1 Support for GNOME in xulrunner app
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: xulrunner
Source-Version: 1.9.1.1-2
We believe that the bug you reported is fixed in the latest version of
xulrunner, which is due to be installed in the Debian FTP archive:
libmozillainterfaces-java_1.9.1.1-2_all.deb
to pool/main/x/xulrunner/libmozillainterfaces-java_1.9.1.1-2_all.deb
libmozjs-dev_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/libmozjs-dev_1.9.1.1-2_amd64.deb
libmozjs2d-dbg_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/libmozjs2d-dbg_1.9.1.1-2_amd64.deb
libmozjs2d_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/libmozjs2d_1.9.1.1-2_amd64.deb
python-xpcom_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/python-xpcom_1.9.1.1-2_amd64.deb
spidermonkey-bin_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/spidermonkey-bin_1.9.1.1-2_amd64.deb
xulrunner-1.9.1-dbg_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/xulrunner-1.9.1-dbg_1.9.1.1-2_amd64.deb
xulrunner-1.9.1-gnome-support_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/xulrunner-1.9.1-gnome-support_1.9.1.1-2_amd64.deb
xulrunner-1.9.1_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/xulrunner-1.9.1_1.9.1.1-2_amd64.deb
xulrunner-dev_1.9.1.1-2_amd64.deb
to pool/main/x/xulrunner/xulrunner-dev_1.9.1.1-2_amd64.deb
xulrunner_1.9.1.1-2.diff.gz
to pool/main/x/xulrunner/xulrunner_1.9.1.1-2.diff.gz
xulrunner_1.9.1.1-2.dsc
to pool/main/x/xulrunner/xulrunner_1.9.1.1-2.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 512...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Hommey <gland...@debian.org> (supplier of updated xulrunner package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 30 Jul 2009 00:12:30 +0200
Source: xulrunner
Binary: xulrunner-1.9.1 xulrunner-1.9.1-gnome-support libmozjs2d libmozjs-dev
libmozjs2d-dbg spidermonkey-bin xulrunner-dev xulrunner-1.9.1-dbg
libmozillainterfaces-java python-xpcom
Architecture: source all amd64
Version: 1.9.1.1-2
Distribution: experimental
Urgency: low
Maintainer: Maintainers of Mozilla-related packages
<pkg-mozilla-maintain...@lists.alioth.debian.org>
Changed-By: Mike Hommey <gland...@debian.org>
Description:
libmozillainterfaces-java - XPCOM bindings for Java
libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript
library
libmozjs2d - The Mozilla SpiderMonkey JavaScript library
libmozjs2d-dbg - Development files for the Mozilla SpiderMonkey JavaScript
library
python-xpcom - XPCOM bindings for Python
spidermonkey-bin - standalone JavaScript/ECMAScript (ECMA-262) interpreter
xulrunner-1.9.1 - XUL + XPCOM application runner
xulrunner-1.9.1-dbg - Development files for the Gecko engine library
xulrunner-1.9.1-gnome-support - Support for GNOME in xulrunner applications
xulrunner-dev - Development files for the Gecko engine library
Closes: 512111 537775
Changes:
xulrunner (1.9.1.1-2) experimental; urgency=low
.
* js/src/Makefile.in: Avoid linking with system-installed libmozjs when
linking js binary to it.
* debian/rules, debian/symbols.filter: Workaround bug in gcc < 4.4
exporting hidden vtables and VTTs on armel. Closes: #537775.
* modules/libpref/src/prefapi.cpp: Avoid writing out locked prefs default
value in user preferences. Closes: #512111.
* debian/rules:
+ Don't fail to build with DEB_BUILD_OPTIONS=noopt.
+ Avoid duplicating LDFLAGS during the build.
* debian/control: Change the Maintainer field and add Uploaders. Welcome
to Antonio Jose Lopez Morillo.
Checksums-Sha1:
8225ff312716aae65118e0336280501c2bb5aa1c 1924 xulrunner_1.9.1.1-2.dsc
4d985063d9888b0be73c2774789ba9d9cfbf1c5f 134305 xulrunner_1.9.1.1-2.diff.gz
9ebbabedc656373b8a9a4293fa874684b6dff6d3 1537538
libmozillainterfaces-java_1.9.1.1-2_all.deb
14594444ed0e4e1e4dd1899d4aa728e7770e69c5 8373850
xulrunner-1.9.1_1.9.1.1-2_amd64.deb
99ae5a86cac8868ffdf3fd99a1e5df424df0c342 108166
xulrunner-1.9.1-gnome-support_1.9.1.1-2_amd64.deb
37241976497eb2f9cf58c14acee37e832f911e6f 408836 libmozjs2d_1.9.1.1-2_amd64.deb
96a9e77dfb84bd7c878e0764eb765a65bbe59351 256880
libmozjs-dev_1.9.1.1-2_amd64.deb
186718acae1de0cf3bfd7a5379f1cddc3f30d2c8 1042732
libmozjs2d-dbg_1.9.1.1-2_amd64.deb
4328e260f6de447164bea73336d5a3805a29f081 77400
spidermonkey-bin_1.9.1.1-2_amd64.deb
0742533b22e4a3e877ce598105d91260488f2870 3523856
xulrunner-dev_1.9.1.1-2_amd64.deb
d164142c8f10b033f68e5650fdb9e2d89afb5698 55905420
xulrunner-1.9.1-dbg_1.9.1.1-2_amd64.deb
ae71bed4abaed2ba1cae63488cf058d08f3a18ed 159408
python-xpcom_1.9.1.1-2_amd64.deb
Checksums-Sha256:
bba7bebe1f301389ab47c217836cf0403a8240df1b09b42400cc80b178eca7e6 1924
xulrunner_1.9.1.1-2.dsc
b368dc35bb414beed78b86e9cf88dc94346d934901258465c164749ab6fa5ea6 134305
xulrunner_1.9.1.1-2.diff.gz
c506f9c1683d71e56d3e95d1fd5edd250dbc074fe667629de165afc51f79cbeb 1537538
libmozillainterfaces-java_1.9.1.1-2_all.deb
1315069f44bbb796ad04636dc213c536e6f7b7c2c87d3c7fa0852b784ce23c91 8373850
xulrunner-1.9.1_1.9.1.1-2_amd64.deb
79bd32131999e124732cab1ebe6f7d97d96407588252f136f8e8598bd169a152 108166
xulrunner-1.9.1-gnome-support_1.9.1.1-2_amd64.deb
4982a1a1b8c9b55cf6a43675d3f5485cec0c07323ec75b20539640c1e5e27e99 408836
libmozjs2d_1.9.1.1-2_amd64.deb
2f29da352bf3a207576f8369b3fa6a27f48ebeba1fdb0f4b0189d370b163c560 256880
libmozjs-dev_1.9.1.1-2_amd64.deb
7867b75b449270e73c9ab8bd38099629041addb465e589d9a1689c79d8fd25b1 1042732
libmozjs2d-dbg_1.9.1.1-2_amd64.deb
4e38109ffb89b7c18d9c8c727054934299904155dd45dcdd61ae9c1500567d04 77400
spidermonkey-bin_1.9.1.1-2_amd64.deb
fbe39b505e1a6d9ba67cc4975bb25e0fd581784fe070438c9df76c888fc7beb9 3523856
xulrunner-dev_1.9.1.1-2_amd64.deb
b54edd81625a8d3dc3f9c3cadb539fc578dd17582bff77c70c124081cb433fff 55905420
xulrunner-1.9.1-dbg_1.9.1.1-2_amd64.deb
71e3827a116c6cadab88057a5f27688520c3e79b396a93d3c24d240e4c597dd9 159408
python-xpcom_1.9.1.1-2_amd64.deb
Files:
39b728872290527d7acffdd7127bd22f 1924 devel optional xulrunner_1.9.1.1-2.dsc
a416efa8afd4229effc707fed7de92a5 134305 devel optional
xulrunner_1.9.1.1-2.diff.gz
3d2f776d2bf64f1b7937ea85964e2ce0 1537538 java extra
libmozillainterfaces-java_1.9.1.1-2_all.deb
523b7b23d1c8230325eff55bfecba1e2 8373850 devel optional
xulrunner-1.9.1_1.9.1.1-2_amd64.deb
003c90a1ef74236d4233c7d610809dc0 108166 devel optional
xulrunner-1.9.1-gnome-support_1.9.1.1-2_amd64.deb
eeb247e22fc15bee515efbe79b0ef08e 408836 libs optional
libmozjs2d_1.9.1.1-2_amd64.deb
8aed06f8238b35c796e98a5eaeb93990 256880 libdevel optional
libmozjs-dev_1.9.1.1-2_amd64.deb
668df24bdc1924327fb7670a89bad872 1042732 debug extra
libmozjs2d-dbg_1.9.1.1-2_amd64.deb
293c1a54150c84246e4c0153311e54b4 77400 interpreters optional
spidermonkey-bin_1.9.1.1-2_amd64.deb
20ce3085ba93988c6ca393a74e60fb10 3523856 libdevel optional
xulrunner-dev_1.9.1.1-2_amd64.deb
a6517076c5e58095a6dc548ee216dfe9 55905420 debug extra
xulrunner-1.9.1-dbg_1.9.1.1-2_amd64.deb
b3a2ddc4143da8728f3c3faeb6c9cda0 159408 python extra
python-xpcom_1.9.1.1-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFKcVJG3kvaLFT9KlgRAr/sAJ98ja7Gyu5zMJI75Nv08lnRGu1A9ACcDsxB
/zlMx5q8SgXf+aZRyXX0+Hs=
=gvRB
-----END PGP SIGNATURE-----
--- End Message ---
