UPLOADED (icedove) Re: 1.8.0.14b patches superseed 1.8.0.14a beta patches

[Alexander Sack]

resending ... failed to keep CCs ...

On Sun, Oct 21, 2007 at 09:04:22AM +0200, Mike Hommey wrote:
> On Sat, Oct 20, 2007 at 08:28:47PM -0400, Eric Dorland wrote:
> > * Alexander Sack (asac at debian.org) wrote:
> > > On Thu, Oct 18, 2007 at 03:42:31PM +0200, Alexander Sack wrote:
> > > > 
> > > > @Mike, Eric: if you don't want to care, I can also prepare the uploads
> > > > for your packages. for iceweasel I would suggest to wait till the
> > > > final sources are officially released though.
> > > > 
> > > 
> > > Eric, I haven't received any input from you on this. So, I assume that
> > > you currently don't have the time to do the iceweasel update. I
> > > willwait till tomorrow and then do the iceweasel upload (together with
> > > iceape).
> > > 
> > > In case you are already working on it, please let me know.
> > 
> > I will have time for it tomorrow but if you've already got patches,
> > and would like to do it then by all means go ahead. I haven't looked
> > at it at all yet, does it make more sense to use 2.0.0.8 or are there
> > a lot of no security related changes?
> 
> There are *a lot* of non security related changes. See
> https://bugzilla.mozilla.org/buglist.cgi?keywords=fixed1.8.1.8


The right query would also ask for verified1.8.1.8 ... and yes, there
are a lot of not directly security related patches (50 out of 229 are
security related). Anyway, I don't think this is a problem
... especially since iceweasel doesn't provide libs anymore.

@security team ... what about the idea to _misuse_ stable proposed
updates repository to get widespread beta-testing one or two weeks
before final release (e.g. when mozilla rolls out their bits to
registered beta testers)? Can we do something like that in future?

 - Alexander