What exactly breaks if the update to v1.06 is applied, as upstream
recommends?
I realise you are seeking a general solution. I believe that we need
case specific information. This will enable us to evaluate any proposed
general solutions, with the illumination of real facts.
Actually, I see that I am echoing the unanswered question from Ben in
his email of 1-Aug:
What hard reasons are there that prevent you from shipping Firefox 1.0.6
and Mozilla 1.7.11 right now?
We're looking for a general resolution of this problem. If we go on that way -
this won't solve the problem in the long term.
Looking back to mozilla, this fears are not FUD - they have already taken
place.
apologies for the repeat - I did actually say:
"I realise you are seeking a general solution. I believe that we need
case specific information. This will enable us to evaluate any proposed
general solutions, with the illumination of real facts."
and the question:
"What hard reasons are there that prevent you from shipping Firefox
1.0.6 and Mozilla 1.7.11 right now?"
still remains unanswered.
A quick check in the package file for dependencies, seems to indicate
that the following prevent an update of mozilla/thunderbird/firefox:
<< 1.0.2.0 mozilla-thunderbird by: mozilla-thunderbird-enigmail
<< 1.0.2.0 mozilla-thunderbird by: mozilla-thunderbird-locale-de
<< 1.0.2.0 mozilla-thunderbird by: mozilla-thunderbird-locale-nl
<< 1.0.3 mozilla-thunderbird by: mozilla-thunderbird-locale-fr
<< 2:1.7.8.0 mozilla-browser by: mozilla-locale-fr
<< 2:1.7.8.0 mozilla-browser by: mozilla-locale-ptbr
<< 2:1.7.8.0 mozilla-mailnews by: mozilla-enigmail
<< 2:1.7.8.0 mozilla-mailnews by: mozilla-enigmail
<< 2:1.7.8.9 mozilla-browser by: mozilla-locale-lt
So if the dependency information is correct (I have attached the
dependencies that I examined), one application: enigmail, and six
locales would break by using an update to fix the security issue.
As most of the other locales have a dependency on << 1.0.999, I wonder
if these would really break?
If the basic issue appears to be security team resources, the question
in this instance becomes:
Is it easier to backport the security fixes, or to update mozilla and
enigmail?
leading on to:
Will the next mozilla security fix be easier or harder to resolve, if I
update or backport now?
£0.01
<< 1.0.2.0 mozilla-thunderbird by:
mozilla-thunderbird-enigmail
<< 1.0.2.0 mozilla-thunderbird by:
mozilla-thunderbird-locale-de
<< 1.0.2.0 mozilla-thunderbird by:
mozilla-thunderbird-locale-nl
<< 1.0.3 mozilla-thunderbird by:
mozilla-thunderbird-locale-fr
<< 2:1.7.8.0 mozilla-browser by: mozilla-locale-fr
<< 2:1.7.8.0 mozilla-browser by: mozilla-locale-ptbr
<< 2:1.7.8.0 mozilla-mailnews by: mozilla-enigmail
<< 2:1.7.8.0 mozilla-mailnews by: mozilla-enigmail
<< 2:1.7.8.9 mozilla-browser by: mozilla-locale-lt
= 1.0.2-2 mozilla-thunderbird by: mozilla-thunderbird-dev
= 1.0.2-2 mozilla-thunderbird by:
mozilla-thunderbird-inspector
= 1.0.2-2 mozilla-thunderbird by:
mozilla-thunderbird-offline
= 1.0.2-2 mozilla-thunderbird by:
mozilla-thunderbird-typeaheadfind
= 1.0.4-2 mozilla-firefox by:
mozilla-firefox-dom-inspector
= 1.0.4-2 mozilla-firefox by:
mozilla-firefox-gnome-support
= 2:1.7.8-1 mozilla-browser by: mozilla
= 2:1.7.8-1 mozilla-browser by: mozilla-calendar
= 2:1.7.8-1 mozilla-browser by: mozilla-chatzilla
= 2:1.7.8-1 mozilla-browser by: mozilla-dev
= 2:1.7.8-1 mozilla-browser by: mozilla-dom-inspector
= 2:1.7.8-1 mozilla-browser by: mozilla-js-debugger
= 2:1.7.8-1 mozilla-browser by: mozilla-mailnews
= 2:1.7.8-1 mozilla-browser by: mozilla-psm
= 2:1.7.8-1 mozilla-mailnews by: mozilla
= 2:1.7.8-1 mozilla-mailnews by: mozilla
= 2:1.7.8-1 mozilla-psm by: mozilla
= 2:1.7.8-1 mozilla-psm by: mozilla
<< 1.0.99 mozilla-firefox by:
mozilla-firefox-locale-ca
<< 1.0.99 mozilla-firefox by:
mozilla-firefox-locale-eu
<< 1.0.99 mozilla-thunderbird by:
mozilla-thunderbird-locale-pl
<< 1.0.99 mozilla-thunderbird by:
mozilla-thunderbird-locale-pt-br
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-af-za
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-ast-es
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-bg-bg
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-cs-cz
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-da-dk
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-de-de
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-en-gb
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-es-ar
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-es-es
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-fi-fi
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-fr-fr
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-ga-ie
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-gu-in
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-he-il
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-hu-hu
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-mk-mk
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-nl-nl
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-pa-in
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-pl-pl
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-pt-br
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-pt-pt
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-ro-ro
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-ru-ru
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-sl-si
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-sq-al
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-sv-se
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-tr-tr
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-zh-cn
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-locale-zh-tw
<< 1.0.999 mozilla-firefox by:
mozilla-firefox-theme-rtlclassic
<< 1.0.999 mozilla-firefox-theme-rtlclassic by:
mozilla-firefox-locale-he-il
<< 1.1 mozilla-firefox by:
mozilla-firefox-locale-el
<< 1.1 mozilla-firefox by:
mozilla-firefox-locale-tr
<< 1.1 mozilla-firefox by:
mozilla-firefox-locale-uk
<< 1.1 mozilla-thunderbird by:
mozilla-thunderbird-locale-ca
<< 1.1 mozilla-thunderbird by:
mozilla-thunderbird-locale-tr
<< 1.1 mozilla-thunderbird by:
mozilla-thunderbird-locale-uk
<< 2:1.7.99.0 mozilla-browser by: mozilla-locale-pl
<< 2:1.8 mozilla-browser by: mozilla-locale-ca
<< 2:1.8 mozilla-browser by: mozilla-locale-cy
<< 2:1.8 mozilla-browser by: mozilla-locale-da
<< 2:1.8 mozilla-browser by: mozilla-locale-el
<< 2:1.8 mozilla-browser by: mozilla-locale-eu
<< 2:1.8 mozilla-browser by: mozilla-locale-hu
<< 2:1.8 mozilla-browser by: mozilla-locale-no-nb
<< 2:1.8 mozilla-browser by: mozilla-locale-sl
<= 1.0.99 mozilla-firefox by:
mozilla-firefox-locale-it
<= 1.0.99 mozilla-firefox by:
mozilla-firefox-locale-ja
<= 1.0.99 mozilla-firefox by:
mozilla-firefox-locale-ko
<= 1.0.99 mozilla-thunderbird by:
mozilla-thunderbird-locale-it
= 0.9.1-1 liferea by: liferea-gtkhtml
= 0.9.1-1 liferea by: liferea-mozilla
= 0.9.1-1 liferea-gtkhtml by: liferea
= 0.9.1-1 liferea-mozilla by: liferea
= 0.9.3-1 libdevhelp-1-0 by: devhelp
= 0.9.3-1 libdevhelp-1-0 by: libdevhelp-1-dev
= 1.3.20-1 galeon by: galeon-common
= 1.3.20-1 galeon-common by: galeon
= 1.4.8-3 epiphany-browser by: epiphany-browser-dev
= 1.4.8-3 epiphany-browser by: epiphany-browser-dev
= 64 gnome-desktop-environment by: gnome
= 64 gnome-desktop-environment by: gnome
= 64 gnome-desktop-environment by: gnome
= 64 gnome-desktop-environment by: gnome-fifth-toe
= 64 gnome-desktop-environment by: gnome-fifth-toe
= 64 gnome-desktop-environment by: gnome-fifth-toe
>= 0.99+1.0RC1-3 mozilla-firefox by:
>mozilla-firefox-locale-nb
>= 0.99+1.0RC1-3 mozilla-firefox by: mozilla-mozgest
>= 0.99+1.0RC1-3 mozilla-firefox by: mozilla-stumbleupon
>= 1.0 mozilla-firefox by:
>mozilla-firefox-locale-ar
>= 1.0 mozilla-thunderbird by:
>mozilla-thunderbird-locale-el
>= 1.0 mozilla-thunderbird by:
>mozilla-thunderbird-locale-ko
>= 1.3.18 galeon by:
>gnome-desktop-environment
>= 1.4 mozilla-browser by: mozilla-bonobo
>= 1.4.6 epiphany-browser by: epiphany-extensions
>= 1.4.6 epiphany-browser by: epiphany-extensions
>= 1.4.7 epiphany-browser by:
>gnome-desktop-environment
>= 1.4.7 epiphany-browser by:
>gnome-desktop-environment
>= 2:1.0 mozilla-browser by: mozilla-mozgest
>= 2:1.0 mozilla-browser by: mozilla-stumbleupon
>= 2:1.0.0 mozilla-browser by: mozilla-cascades
>= 2:1.7 mozilla-browser by: libdevhelp-1-0
>= 2:1.7 mozilla-browser by: mozilla-locale-ko
>= 2:1.7.2 mozilla-browser by: mozilla-locale-tr
>= 2:1.7.3 mozilla-browser by: mozilla-locale-es-es
>= 2:1.7.5 mozilla-browser by: galeon
>= 2:1.7.5 mozilla-browser by: mozilla-locale-cs
>= 2:1.7.6 mozilla-browser by: epiphany-browser
>= 2:1.7.6 mozilla-browser by: mozilla-locale-ja
>= 2:1.7.6 mozilla-psm by: epiphany-browser
>= 2:1.7.6 mozilla-psm by: epiphany-browser
>= 2:1.7.8 mozilla-browser by: kazehakase
>= 2:1.7.8 mozilla-browser by: mozilla-locale-de-at
any devhelp by: devhelp-book-autotools
any devhelp by: devhelp-book-binutils
any devhelp by: devhelp-book-cvs
any devhelp by: devhelp-book-emacs
any devhelp by: devhelp-book-gdb
any devhelp by: devhelp-book-glibc
any devhelp by: devhelp-book-gtk2
any devhelp by: devhelp-book-make
any devhelp by: devhelp-book-sdl
any devhelp by: devhelp-books
any devhelp by: gnome-devel
any devhelp-book-autotools by: devhelp-books
any devhelp-book-binutils by: devhelp-books
any devhelp-book-cvs by: devhelp-books
any devhelp-book-emacs by: devhelp-books
any devhelp-book-gdb by: devhelp-books
any devhelp-book-glibc by: devhelp-books
any devhelp-book-gtk2 by: devhelp-books
any devhelp-book-make by: devhelp-books
any devhelp-book-sdl by: devhelp-books
any mozilla by: junior-internet
any mozilla by: junior-internet
any mozilla by: junior-internet
any mozilla by: junior-internet
any mozilla by: webhttrack
any mozilla by: webhttrack
any mozilla by: webhttrack
any mozilla by: webhttrack
any mozilla-browser by: liferea-mozilla
any mozilla-browser by: med-dent
any mozilla-browser by: mozilla-checky
any mozilla-browser by: mozilla-ctxextensions
any mozilla-browser by: mozilla-diggler
any mozilla-browser by: mozilla-livehttpheaders
any mozilla-browser by: mozilla-nukeimage
any mozilla-browser by: mozilla-tabextensions
any mozilla-browser by: mozilla-venkman
any mozilla-browser by: tiemu
any mozilla-browser by: tilp
any mozilla-browser by: wysihtml-el
any mozilla-firefox by: mozilla-bonobo
any mozilla-firefox by: mozilla-checky
any mozilla-firefox by: mozilla-ctxextensions
any mozilla-firefox by: mozilla-diggler
any mozilla-firefox by: mozilla-livehttpheaders
any mozilla-firefox by: mozilla-nukeimage
any mozilla-firefox by: mozilla-tabextensions
any mozilla-firefox by: mozilla-venkman
any mozilla-firefox by: wysihtml-el
any mozilla-firefox-gnome-support by:
gnome-desktop-environment
any mozilla-locale-es-es by: mozilla-locale-es
