Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.project > #12787 > unrolled thread

Chromium on Debian 11

Back to article view | Back to linux.debian.project

Contents

  Chromium on Debian 11 phil995511 - <phil995511@gmail.com> - 2022-04-17 12:10 +0200
    Re: Chromium on Debian 11 Andrey Rahmatullin <wrar@debian.org> - 2022-04-17 13:00 +0200
    Re: Chromium on Debian 11 Leandro Cunha <leandrocunha016@gmail.com> - 2022-04-17 13:10 +0200
    Re: Chromium on Debian 11 Leandro Cunha <leandrocunha016@gmail.com> - 2022-04-17 13:40 +0200
    Re: Chromium on Debian 11 phil995511 - <phil995511@gmail.com> - 2022-04-17 13:40 +0200
      Re: Chromium on Debian 11 Marc Haber <mh+debian-project@zugschlus.de> - 2022-04-17 13:50 +0200
      Re: Chromium on Debian 11 phil995511 - <phil995511@gmail.com> - 2022-04-17 14:40 +0200
        Re: Chromium on Debian 11 <tomas@tuxteam.de> - 2022-04-17 15:00 +0200
        Version of Chromium and Firefox ESR available on Stable (Re: Chromium on Debian 11) Charles Plessy <plessy@debian.org> - 2022-04-17 15:10 +0200
          Re: Version of Chromium and Firefox ESR available on Stable (Re: Chromium on Debian 11) Marc Haber <mh+debian-project@zugschlus.de> - 2022-04-17 15:20 +0200
        Re: Chromium on Debian 11 Leandro Cunha <leandrocunha016@gmail.com> - 2022-04-17 15:10 +0200
        Re: Chromium on Debian 11 Martin Steigerwald <martin@lichtvoll.de> - 2022-04-18 13:20 +0200
      Re: Chromium on Debian 11 Martin Steigerwald <martin@lichtvoll.de> - 2022-04-17 14:40 +0200
    Re: Chromium on Debian 11 Andres Salomon <dilinger@queued.net> - 2022-04-17 18:00 +0200
    Re: Chromium on Debian 11 Satvik Sinha <sinhasatvik214@gmail.com> - 2022-04-17 19:10 +0200

#12787 — Chromium on Debian 11

[Multipart message — attachments visible in raw view] — view raw

Hello,

Chromium is on version 99 on Debian 11 Stable :

bullseye (stable) (web): navigateur web
99.0.4844.74-1~deb11u1: amd64 arm64 armhf i386
https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium

2 highlest security updates have been released since.

The Testing and Unstable branches each get one of these 2 updates
(100.0.4896.88-1 & 100.0.4896.127-1), but not Stable (99.0.4844.74-1) !?!

Debian 11 Stable users are exposed to these major security flaws.

They risk having important confidential information stolen, whether their
computer systems are hacked remotely ;-(

Your solution of pushing browser updates first through Unstable, then
through Testing and finally pushing them to the Stable branch more than a
1/2 month later has the consequence that you leave your Debian Stable users
become potential victims of hackers.

This way of doing things is wrong and needs to be changed urgently for the
good of Debian Stable users !!!

You must immediately publish all new updates to the Stable branch,
immediately after they have been released !!!

The current situation just makes you want to abandon Debian for a
distribution with better monitoring of updates...

Regards.

[toc] | [next] | [standalone]

#12788

[Multipart message — attachments visible in raw view] — view raw

On Sun, Apr 17, 2022 at 11:46:30AM +0200, phil995511 - wrote:
> Hello,
> 
> Chromium is on version 99 on Debian 11 Stable :
No. See e.g. https://tracker.debian.org/news/1318930/accepted-chromium-10004896127-1deb11u1-source-into-stable-security-embargoed-stable-security/

> bullseye (stable) (web): navigateur web
> 99.0.4844.74-1~deb11u1: amd64 arm64 armhf i386
> https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium
You shouldn't use packages.debian.org as it doesn't know about
stable-security.

> Your solution of pushing browser updates first through Unstable, then
> through Testing and finally pushing them to the Stable branch more than a
> 1/2 month later 
No, that's not how it works.

-- 
WBR, wRAR

[toc] | [prev] | [next] | [standalone]

#12789

Hi,

On Sun, Apr 17, 2022 at 6:46 AM phil995511 - <phil995511@gmail.com> wrote:
>
> Hello,
>
> Chromium is on version 99 on Debian 11 Stable :
>
> bullseye (stable) (web): navigateur web
> 99.0.4844.74-1~deb11u1: amd64 arm64 armhf i386
> https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium
>
> 2 highlest security updates have been released since.
>
> The Testing and Unstable branches each get one of these 2 updates (100.0.4896.88-1 & 100.0.4896.127-1), but not Stable (99.0.4844.74-1) !?!
>
> Debian 11 Stable users are exposed to these major security flaws.
>
> They risk having important confidential information stolen, whether their computer systems are hacked remotely ;-(
>
> Your solution of pushing browser updates first through Unstable, then through Testing and finally pushing them to the Stable branch more than a 1/2 month later has the consequence that you leave your Debian Stable users become potential victims of hackers.
>
> This way of doing things is wrong and needs to be changed urgently for the good of Debian Stable users !!!
>
> You must immediately publish all new updates to the Stable branch, immediately after they have been released !!!
>
> The current situation just makes you want to abandon Debian for a distribution with better monitoring of updates...
>
> Regards.

Andres Salomon, uploaded the latest released version to unstable pro
bullseye/stable-security.

[1] https://tracker.debian.org/news/1318930/accepted-chromium-10004896127-1deb11u1-source-into-stable-security-embargoed-stable-security/
[2] https://tracker.debian.org/pkg/chromium

-- 
Cheers,
Leandro Cunha
Software Engineer and Debian Contributor

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀⠀⠀

[toc] | [prev] | [next] | [standalone]

#12790

Hi,

You are sending emails to the list without having checked
tracker.debian.org for information about updates.

-- 
Cheers,
Leandro Cunha
Software Engineer and Debian Contributor

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀⠀⠀

[toc] | [prev] | [next] | [standalone]

#12791

[Multipart message — attachments visible in raw view] — view raw

Hi,

Forgive me but your answer is off topic, my e-mail is not bossy but it
surely points the finger at the biggest security gap in Debian...

It's good to do voluntary work, it's even better to do it in a safe and
secure way for the users, otherwise your work is useless.

I'm sure I'm not the first to point this out to you and ask you to question
yourself, you yourself should know there's a problem, even if you don't
tell me don't confess directly.

I hope you will question this for the benefit of all Debian users !!!
Security updates, especially web browsers, should be published without
delay, because these security failures are already being exploited by
hackers ;-(

Apart from that if you have a problem with Gmail, it's only up to you...

Regards.


Le dim. 17 avr. 2022 à 12:33, Martin Steigerwald <martin@lichtvoll.de> a
écrit :

> Hi!
>
> Replying off-list.
>
> phil995511 - - 17.04.22, 11:46:30 CEST:
> > They risk having important confidential information stolen, whether
> > their computer systems are hacked remotely ;-(
>
> Says someone who voluntarily gives private information to Google by
> using a Googlemail account.
>
> How about walking your own talk *first*?
>
> > You must immediately publish all new updates to the Stable branch,
> > immediately after they have been released !!!
>
> I think your commanding tone towards people who work on this in their
> free time is not appropriate. But I expect other people will point that
> out to you as well.
>
> This might be my last mail to you as long as your mail is hosted by
> Google.
>
> Thanks,
> --
> Martin
>
>
>

[toc] | [prev] | [next] | [standalone]

#12792

On Sun, Apr 17, 2022 at 01:18:25PM +0200, phil995511 - wrote:
> Forgive me but your answer is off topic, my e-mail is not bossy but it
> surely points the finger at the biggest security gap in Debian...

Replying public to a private message is considered very bad style.
Please don't do that in the future.

Your messages appear to me as demanding and unfriendly. I would be
offended by them even if you were my paying customer (which you are
not). Please consider working on you style.

In the past, you have been pointed out that debian-project is not the
correct list for your issues, why do you keep coming here?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

[toc] | [prev] | [next] | [standalone]

#12793

[Multipart message — attachments visible in raw view] — view raw

You know Marc, if you respond badly to people for a reason that is yours,
don't be surprised if they show their displeasure in one way or another.

My post is trying to bring your attention to a major issue, nothing more,
if you're too tired take a vacation, but respect my request and make sure
to fix issues of Chromium on Debian Stable updates that aren't sufficient
as it is.

I've never been told the remark you echo, and anyway I don't have problems,
it's Chromium in its state in the Stable branch which will potentially pose
a very big security problem for all those who use it.

My style is that of google translate...He is as he is...

Your patches come out 1/2 month too late in Debian Stable, it makes your
work in Debian Stable useless and I doubt you have many users using a
Debian Experimental based distribution... Now if you don't want to
questioning yourself and your volunteer working group to bring more
security to Debian Stable and its users, you are unwittingly scuttling the
entire Debian project and pushing people to switch to, for example,
ArchLinux.

I would have tried to make you aware of it, I will not do it again x times,
I will simply migrate to another OS if you remain in this situation or the
apps such as Chromium are not seriously updated enough, which I do not
don't find it satisfactory, like a lot of other Linux users. Afterwards, if
you need help to do the job, you have to ask for it instead and always try
to do better rather than leave things as they are...

Regards.

Le dim. 17 avr. 2022 à 14:13, Martin Steigerwald <martin@lichtvoll.de> a
écrit :

> phil995511 - - 17.04.22, 13:18:25 CEST:
> > > Replying off-list.
>
> I replied off list for a reason.
>
> *sigh*
>
> --
> Martin
>
>
>

[toc] | [prev] | [next] | [standalone]

#12795

[Multipart message — attachments visible in raw view] — view raw

On Sun, Apr 17, 2022 at 02:17:11PM +0200, phil995511 - wrote:

[...]

> My style is that of google translate...He is as he is...

Perhaps you should fire your translator, then. He (?) is extremely
unfriendly.

Cheers
-- 
t

[toc] | [prev] | [next] | [standalone]

#12796 — Version of Chromium and Firefox ESR available on Stable (Re: Chromium on Debian 11)

Hi all,

Maybe we can all cool down and focus on the take home message:

"packages.debian.org misleads users about which version of major
browsers are available in Stable"

On my side, I had the exact same problem with Firefox ESR.

So if there is somebody who is familiar with the code running behind
packages.debian.org, proposing a fix to the admins would be, in my
opinion, very helpful for our users.

Have a nice Sunday,

Charles

[toc] | [prev] | [next] | [standalone]

#12798 — Re: Version of Chromium and Firefox ESR available on Stable (Re: Chromium on Debian 11)

On Sun, Apr 17, 2022 at 09:56:37PM +0900, Charles Plessy wrote:
> "packages.debian.org misleads users about which version of major
> browsers are available in Stable"

That message was actually hidden behind all that unfriendlyness. I
totally missed it.

Greetings
Marc, speaking for the record, wishing a nice sunday as well

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

[toc] | [prev] | [next] | [standalone]

#12797

Hi,

On Sun, Apr 17, 2022 at 9:17 AM phil995511 - <phil995511@gmail.com> wrote:
>
> You know Marc, if you respond badly to people for a reason that is yours, don't be surprised if they show their displeasure in one way or another.
>
> My post is trying to bring your attention to a major issue, nothing more, if you're too tired take a vacation, but respect my request and make sure to fix issues of Chromium on Debian Stable updates that aren't sufficient as it is.
>
> I've never been told the remark you echo, and anyway I don't have problems, it's Chromium in its state in the Stable branch which will potentially pose a very big security problem for all those who use it.
>
> My style is that of google translate...He is as he is...
>
> Your patches come out 1/2 month too late in Debian Stable, it makes your work in Debian Stable useless and I doubt you have many users using a Debian Experimental based distribution... Now if you don't want to questioning yourself and your volunteer working group to bring more security to Debian Stable and its users, you are unwittingly scuttling the entire Debian project and pushing people to switch to, for example, ArchLinux.
>
> I would have tried to make you aware of it, I will not do it again x times, I will simply migrate to another OS if you remain in this situation or the apps such as Chromium are not seriously updated enough, which I do not don't find it satisfactory, like a lot of other Linux users. Afterwards, if you need help to do the job, you have to ask for it instead and always try to do better rather than leave things as they are...
>
> Regards.
>
> Le dim. 17 avr. 2022 à 14:13, Martin Steigerwald <martin@lichtvoll.de> a écrit :
>>
>> phil995511 - - 17.04.22, 13:18:25 CEST:
>> > > Replying off-list.
>>
>> I replied off list for a reason.
>>
>> *sigh*
>>
>> --
>> Martin
>>
>>

Updates for the stable branch are updated after the point release and for
security updates there are security.debian.org and bullseye-security. And
you can subscribe to the list if you want from debian-security.
In the case of Chromium, it is up to date with security updates and there is
no reason for its protests.

-- 
Cheers,
Leandro Cunha
Software Engineer and Debian Contributor

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀⠀⠀

[toc] | [prev] | [next] | [standalone]

#12804

phil995511 - - 17.04.22, 14:17:11 CEST:
> My post is trying to bring your attention to a major issue, nothing
> more, if you're too tired take a vacation, but respect my request and
> make sure to fix issues of Chromium on Debian Stable updates that
> aren't sufficient as it is.

There is nothing wrong with pointing that out. And I think you have a 
valid point here.

But the way you did… was not really appropriate or helpful.

> I would have tried to make you aware of it, I will not do it again x
> times, I will simply migrate to another OS if you remain in this
> situation or the apps such as Chromium are not seriously updated
> enough, which I do not don't find it satisfactory, like a lot of
> other Linux users. Afterwards, if you need help to do the job, you
[…]

It is perfectly your choice to migrate to another OS.

But I wonder where you take the authority from to speak about a lot of 
Linux users. Do you have anything to back up your claim?

For example I am not effected at all as I am using Devuan Ceres, which is 
based on Debian Sid, for desktop machines. And I do not care all that 
much about Chromium anyway as Firefox is my main browser.

Anyway, someone needs to do the additional work. For free. So I really 
ask you to reconsider whether your tone is helpful here. If I would be 
one of the developers in charge, when confronted with such a tone, I 
would probably just think: "Yeah, then just migrate to another OS. I 
don't care." And that not cause I would not care about the security 
issue you pointed out.

-- 
Martin

[toc] | [prev] | [next] | [standalone]

#12794

phil995511 - - 17.04.22, 13:18:25 CEST:
> > Replying off-list.

I replied off list for a reason.

*sigh*

-- 
Martin

[toc] | [prev] | [next] | [standalone]

#12799

Make sure you have the following in your /etc/apt/sources.list :


deb http://security.debian.org/debian-security bullseye-security main


On 4/17/22 05:46, phil995511 - wrote:
> Hello,
>
> Chromium is on version 99 on Debian 11 Stable :
>
> bullseye (stable) (web): navigateur web
> 99.0.4844.74-1~deb11u1: amd64 arm64 armhf i386
> https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium 
> <https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium>
>
> 2 highlest security updates have been released since.
>
> The Testing and Unstable branches each get one of these 2 updates 
> (100.0.4896.88-1 & 100.0.4896.127-1), but not Stable (99.0.4844.74-1) !?!\

[toc] | [prev] | [next] | [standalone]

#12800

[Multipart message — attachments visible in raw view] — view raw

Hi ,If an update is on only testing and unstable branch ,then that means
that those updates are not yet ready for stable branch and must be in
testing phase where the code and optimised and stabilized for public use
after days of testing

On Sun, 17 Apr 2022 at 15:30, phil995511 - <phil995511@gmail.com> wrote:

> Hello,
>
> Chromium is on version 99 on Debian 11 Stable :
>
> bullseye (stable) (web): navigateur web
> 99.0.4844.74-1~deb11u1: amd64 arm64 armhf i386
>
> https://packages.debian.org/search?suite=default&section=all&arch=any&lang=fr&searchon=names&keywords=chromium
>
> 2 highlest security updates have been released since.
>
> The Testing and Unstable branches each get one of these 2 updates
> (100.0.4896.88-1 & 100.0.4896.127-1), but not Stable (99.0.4844.74-1) !?!
>
> Debian 11 Stable users are exposed to these major security flaws.
>
> They risk having important confidential information stolen, whether their
> computer systems are hacked remotely ;-(
>
> Your solution of pushing browser updates first through Unstable, then
> through Testing and finally pushing them to the Stable branch more than a
> 1/2 month later has the consequence that you leave your Debian Stable users
> become potential victims of hackers.
>
> This way of doing things is wrong and needs to be changed urgently for the
> good of Debian Stable users !!!
>
> You must immediately publish all new updates to the Stable branch,
> immediately after they have been released !!!
>
> The current situation just makes you want to abandon Debian for a
> distribution with better monitoring of updates...
>
> Regards.
>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.project

csiph-web