Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Hannes von Haugwitz
Package: icedove Severity: wishlist Hi, please upgrade to version 2.0.0.23 which fixes critical ssl bug: http://www.mozilla.org/security/known-vulnerabilities/thunderbird20.html#thunderbird2.0.0.23 Thanks, Hannes -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Alexander Sack
reassign 542784 nss thanks That bug needs to be fixed in nss (with more fixes because of blackhat); we updated nss to 3.12.3.1 in ubuntu everywhere as we believe that it's better to not do manual-cherry-picking for security sensitive software like nss. I would suggest the same for debian, but i

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Mike Hommey
On Fri, Aug 21, 2009 at 01:25:23PM +0200, Alexander Sack wrote: reassign 542784 nss thanks That bug needs to be fixed in nss (with more fixes because of blackhat); we updated nss to 3.12.3.1 in ubuntu everywhere as we believe that it's better to not do manual-cherry-picking for security

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Alexander Sack
On Fri, Aug 21, 2009 at 08:03:36PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 01:25:23PM +0200, Alexander Sack wrote: reassign 542784 nss thanks That bug needs to be fixed in nss (with more fixes because of blackhat); we updated nss to 3.12.3.1 in ubuntu everywhere as we

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Mike Hommey
On Fri, Aug 21, 2009 at 08:10:02PM +0200, Alexander Sack wrote: On Fri, Aug 21, 2009 at 08:03:36PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 01:25:23PM +0200, Alexander Sack wrote: reassign 542784 nss thanks That bug needs to be fixed in nss (with more fixes because of

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Moritz Muehlenhoff
Mike Hommey wrote: New upstream versions are normal for this kind of stuff in unstable/testing, so i thought it was not noteworthy. Is the security team following that road? The security team is backporting the fixes. I've been looking into the changes for the last two hours and I

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Mike Hommey
On Fri, Aug 21, 2009 at 11:02:33PM +0200, Moritz Muehlenhoff wrote: Mike Hommey wrote: New upstream versions are normal for this kind of stuff in unstable/testing, so i thought it was not noteworthy. Is the security team following that road? The security team is backporting

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Moritz Muehlenhoff
On Fri, Aug 21, 2009 at 11:05:22PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 11:02:33PM +0200, Moritz Muehlenhoff wrote: Mike Hommey wrote: New upstream versions are normal for this kind of stuff in unstable/testing, so i thought it was not noteworthy. Is the

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Mike Hommey
On Fri, Aug 21, 2009 at 11:10:47PM +0200, Moritz Muehlenhoff wrote: On Fri, Aug 21, 2009 at 11:05:22PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 11:02:33PM +0200, Moritz Muehlenhoff wrote: Mike Hommey wrote: New upstream versions are normal for this kind of stuff in

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Alexander Sack
On Fri, Aug 21, 2009 at 11:10:47PM +0200, Moritz Muehlenhoff wrote: On Fri, Aug 21, 2009 at 11:05:22PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 11:02:33PM +0200, Moritz Muehlenhoff wrote: Mike Hommey wrote: New upstream versions are normal for this kind of stuff in

Bug#542784: New upstream version available (2.0.0.23)

2009-08-21 Thread Mike Hommey
On Fri, Aug 21, 2009 at 11:52:41PM +0200, Alexander Sack wrote: On Fri, Aug 21, 2009 at 11:10:47PM +0200, Moritz Muehlenhoff wrote: On Fri, Aug 21, 2009 at 11:05:22PM +0200, Mike Hommey wrote: On Fri, Aug 21, 2009 at 11:02:33PM +0200, Moritz Muehlenhoff wrote: Mike Hommey wrote: