Partial fix for CVE-2015-4495/pdf.js in Jessie?

David Prévot david at tilapin.org
Sat Aug 15 21:27:34 UTC 2015


Le 15/08/2015 12:29, Moritz Mühlenhoff a écrit :
> On Wed, Aug 12, 2015 at 10:05:14PM +0200, David Prévot wrote:
>> Le 12/08/2015 19:49, Moritz Mühlenhoff a écrit :
>>
>>> What is the use case of xul-ext-pdf.js, TTBOMK there is no other browser
>>> in Debian capable of running Xul extensions other than Iceweasel?
>>
>> I honestly wonder (since it’s already built-in Iceweasel).
> 
> Rule of thumb: If you as the maintainer don't know the use case, get rid
> of it :-)

Sure! Should the removal of the xul-ext-pdf.js binary happen via the
security.d.o repository, or should I follow up with the release time?

I’ll take care of the removal via unstable in my next upload too, of course.

Regards

David

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20150815/395a16d4/attachment.sig>


More information about the pkg-mozilla-maintainers mailing list