Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2009-01-03 Thread Marc 'HE' Brockschmidt
Thijs Kinkhorst writes: > I think Alexander's proposal to upload .19 at the beginning of next week is > what we're doing for lenny. It is standing policy that Mozilla minor releases > are uploaded and accepted, even to stable-security. Just for the record, as release team position: Yes, that's

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-31 Thread Thijs Kinkhorst
On Wednesday 31 December 2008 09:36, Mark Purcell wrote: > While I can understand your position. This still leaves an RC bug open > against lenny. > > What do you propose we do for lenny? > > 1. Leave bug open for lenny. Tag lenny-ignore? > > 2. Request freeze exception for the new upstream release

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-31 Thread Mark Purcell
#505563: Mozilla Thunderbird Multiple Vulnerabilities From: Mike Hommey Date: 31/12/2008 17:56 On Wed, Dec 31, 2008 at 04:21:05PM +1100, Mark Purcell wrote: > Thanks Alexander, > > Be advised that the normal approach to fixing a RC bug during lenny deep > freeze is by back porting the fix,

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-30 Thread Mike Hommey
On Wed, Dec 31, 2008 at 04:21:05PM +1100, Mark Purcell wrote: > Thanks Alexander, > > Be advised that the normal approach to fixing a RC bug during lenny deep > freeze is by back porting the fix, rather than uploading the new upstream > release. > > Have debian-release been engaged? We (the mo

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-30 Thread Mark Purcell
Thanks Alexander, Be advised that the normal approach to fixing a RC bug during lenny deep freeze is by back porting the fix, rather than uploading the new upstream release. Have debian-release been engaged? Mark -original message- Subject: Re: Bug#505563: Mozilla Thunderbird Multiple

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-30 Thread Alexander Sack
On Tue, Dec 30, 2008 at 08:37:36AM +1100, Mark Purcell wrote: > On Wednesday 26 November 2008 12:04:19 Alexander Sack wrote: > > tags 505563 + pending > > thanks > > > > Yes, > > > > 2.0.0.18 was released last week. Also add MFSA 2008-59 to the list of > > addressed issues. > > Alexander, > > It

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-12-29 Thread Mark Purcell
On Wednesday 26 November 2008 12:04:19 Alexander Sack wrote: > tags 505563 + pending > thanks > > Yes, > > 2.0.0.18 was released last week. Also add MFSA 2008-59 to the list of > addressed issues. Alexander, It was over a month ago you tagged this bug as pending. Are you in a position to upload

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-11-25 Thread Alexander Sack
tags 505563 + confirmed tags 505563 + pending thanks Yes, 2.0.0.18 was released last week. Also add MFSA 2008-59 to the list of addressed issues. I was disclosed on release day and doesn't have a CVE on mozilla site: http://www.mozilla.org/security/known-vulnerabilities/thunderbird20.html Acc

Bug#505563: Mozilla Thunderbird Multiple Vulnerabilities

2008-11-13 Thread Giuseppe Iuculano
Package: icedove Severity: critical Tags: security -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, The following SA (Secunia Advisory) id was published for Thunderbird: SA32715[1] Description: Some vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious