backport patches for RC 220.127.116.11 release
mh at glandium.org
Sun Jul 22 18:45:48 UTC 2007
On Sun, Jul 22, 2007 at 05:32:07PM +0200, Alexander Sack <asac at debian.org> wrote:
> On Sun, Jul 22, 2007 at 11:43:32AM +0200, Mike Hommey wrote:
> > On Sat, Jul 21, 2007 at 09:19:55PM +0200, Mike Hommey <mh at glandium.org> wrote:
> > > Dammit, I'll have to build them all again. I overlooked the fact that
> > > their stupid configure script silently make the whole thing statically
> > > linked against internally provided libpng if the version of the system
> > > library is older than the one provided.
> > New uploads done:
> > iceweasel 18.104.22.168-0etch2
> > iceape 1.0.10~pre070720-0etch2
> > xulrunner 22.214.171.124~pre070720-0etch2.
> > Note there is at least one missing patch in ~pre070720 releases, for
> > https://bugzilla.mozilla.org/show_bug.cgi?id=371858 , that is supposed
> > to come in final release.
> ... from what i read in bug, current behaviour is too strict,
> e.g. not-granting access to principal that should get who should get
> ... "So we get a subject principal that's not allowed to touch the
> inner window of the error page, an exception gets thrown, and the
> error page doesn't work right." - from bug bz#371858 description.
> So imo its not really a security issue - which would make sense as
> mozilla didn't mark it as such (e.g. see no sg:XXX rating in
> Anyway ... in case you really want that you need to take
> https://bugzilla.mozilla.org/show_bug.cgi?id=377090 as well ... which
> extends API though.
This one is already applied, that's how I saw the other was not...
because these new symbols are not used.
More information about the pkg-mozilla-maintainers