Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #4422 > unrolled thread
| Started by | Hideki Yamane <henrich@debian.or.jp> |
|---|---|
| First post | 2015-11-21 03:30 +0100 |
| Last post | 2015-12-02 21:40 +0100 |
| Articles | 7 — 4 participants |
Back to article view | Back to linux.debian.security
icedove: no ESR update? Hideki Yamane <henrich@debian.or.jp> - 2015-11-21 03:30 +0100
Re: icedove: no ESR update? Christoph Goehre <chris@sigxcpu.org> - 2015-11-21 20:20 +0100
Re: icedove: no ESR update? Hideki Yamane <henrich@debian.or.jp> - 2015-11-23 03:00 +0100
Re: icedove: no ESR update? pioruns <pioruns@o2.pl> - 2015-11-23 21:30 +0100
Re: icedove: no ESR update? Paul Wise <pabs@debian.org> - 2015-11-24 03:40 +0100
Re: icedove: no ESR update? pioruns <pioruns@o2.pl> - 2015-11-24 20:40 +0100
Re: icedove: no ESR update? pioruns <pioruns@o2.pl> - 2015-12-02 21:40 +0100
| From | Hideki Yamane <henrich@debian.or.jp> |
|---|---|
| Date | 2015-11-21 03:30 +0100 |
| Subject | icedove: no ESR update? |
| Message-ID | <qx665-7p5-1@gated-at.bofh.it> |
Hi, About CVE-2015-4473, CVE-2015-4487, CVE-2015-4488 and CVE-2015-4489. As same as "DSA-3333-1 iceweasel", icedove should be updated with newer ESR version in Stretch/Sid. >> Debian follows the extended support releases (ESR) of Firefox. >> Support for the 31.x series has ended, so starting with this update >> we're now following the 38.x releases. Is there any action for it? or just backport package for stable-security is not enough? -- Regards, Hideki Yamane henrich @ debian.or.jp/org http://wiki.debian.org/HidekiYamane
[toc] | [next] | [standalone]
| From | Christoph Goehre <chris@sigxcpu.org> |
|---|---|
| Date | 2015-11-21 20:20 +0100 |
| Message-ID | <qxlRv-1b2-1@gated-at.bofh.it> |
| In reply to | #4422 |
Hi Hideki, On Sa, Nov 21, 2015 at 10:48:47 +0900, Hideki Yamane wrote: > Hi, > > About CVE-2015-4473, CVE-2015-4487, CVE-2015-4488 and CVE-2015-4489. > As same as "DSA-3333-1 iceweasel", icedove should be updated with > newer ESR version in Stretch/Sid. 38.3.0 is the last ESR version of icedove, which lives in Stretch since November 7th (Sid since November 1st). We are waiting for 38.4.0, which isn't released by Mozilla right now. There are building candidates, but not a official release. > >> Debian follows the extended support releases (ESR) of Firefox. > >> Support for the 31.x series has ended, so starting with this update > >> we're now following the 38.x releases. > > > Is there any action for it? or just backport package for stable-security > is not enough? I'm working on icedove 38.x for stable (Jessie) and oldstable (Wheezy). Hopefully I'll get it done this weekend. They will go into stable-security and oldstable-security. Cheers, Christoph
[toc] | [prev] | [next] | [standalone]
| From | Hideki Yamane <henrich@debian.or.jp> |
|---|---|
| Date | 2015-11-23 03:00 +0100 |
| Message-ID | <qxOAa-3v8-3@gated-at.bofh.it> |
| In reply to | #4423 |
On Sat, 21 Nov 2015 14:18:00 -0500 Christoph Goehre <chris@sigxcpu.org> wrote: > 38.3.0 is the last ESR version of icedove, which lives in Stretch since > November 7th (Sid since November 1st). We are waiting for 38.4.0, which > isn't released by Mozilla right now. There are building candidates, but > not a official release. Okay, as Mozilla wiki, it should be released but it was not. https://wiki.mozilla.org/Releases > I'm working on icedove 38.x for stable (Jessie) and oldstable (Wheezy). > Hopefully I'll get it done this weekend. They will go into > stable-security and oldstable-security. Thanks for your hard work! -- Regards, Hideki Yamane henrich @ debian.or.jp/org http://wiki.debian.org/HidekiYamane
[toc] | [prev] | [next] | [standalone]
| From | pioruns <pioruns@o2.pl> |
|---|---|
| Date | 2015-11-23 21:30 +0100 |
| Message-ID | <qy5Ul-6KM-3@gated-at.bofh.it> |
| In reply to | #4422 |
On 21/11/15 01:48, Hideki Yamane wrote: >>> Debian follows the extended support releases (ESR) of Firefox. >>> Support for the 31.x series has ended, so starting with this update >>> we're now following the 38.x releases. If icedove 31.8.0-1~deb8u1 is no longer supported, should debian-security-support package warn users that it's obsolete? I just checked, checks-support-status did not return any warning about obsolete version of icedove.
[toc] | [prev] | [next] | [standalone]
| From | Paul Wise <pabs@debian.org> |
|---|---|
| Date | 2015-11-24 03:40 +0100 |
| Message-ID | <qybGp-1Y4-3@gated-at.bofh.it> |
| In reply to | #4425 |
On Tue, Nov 24, 2015 at 4:13 AM, pioruns wrote: > If icedove 31.8.0-1~deb8u1 is no longer supported, should > debian-security-support package warn users that it's obsolete? > I just checked, checks-support-status did not return any warning about > obsolete version of icedove. It is still supported and the maintainer is working on the new version: https://lists.debian.org/msgid-search/20151121191800.GB2979@anna.chris.local -- bye, pabs https://wiki.debian.org/PaulWise
[toc] | [prev] | [next] | [standalone]
| From | pioruns <pioruns@o2.pl> |
|---|---|
| Date | 2015-11-24 20:40 +0100 |
| Message-ID | <qyrBv-3WX-3@gated-at.bofh.it> |
| In reply to | #4426 |
On 24/11/15 02:36, Paul Wise wrote: > On Tue, Nov 24, 2015 at 4:13 AM, pioruns wrote: > >> If icedove 31.8.0-1~deb8u1 is no longer supported, should >> debian-security-support package warn users that it's obsolete? >> I just checked, checks-support-status did not return any warning about >> obsolete version of icedove. > > It is still supported and the maintainer is working on the new version: > > https://lists.debian.org/msgid-search/20151121191800.GB2979@anna.chris.local > So we are jumping from 31.8.0 to 38.4.0 (when it's released by Mozilla), in stable, as I understand it? Good to hear! Regards, pioruns
[toc] | [prev] | [next] | [standalone]
| From | pioruns <pioruns@o2.pl> |
|---|---|
| Date | 2015-12-02 21:40 +0100 |
| Message-ID | <qBmlY-3G3-5@gated-at.bofh.it> |
| In reply to | #4428 |
Upgraded version just landed in jessie/updates. New version of Icedove 38.4.0 is working absolutely fine. Thanks! Regards, pioruns
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web