Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 142064 - www-client/mozilla-(firefox|thunderbird)-1.5.0.5, www-client/seamonkey-1.0.3 stable bug
Summary: www-client/mozilla-(firefox|thunderbird)-1.5.0.5, www-client/seamonkey-1.0.3 ...
Status: RESOLVED DUPLICATE of bug 141842
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Security
URL: http://weblogs.mozillazine.org/rumbli...
Whiteboard: A2 [stable]
Keywords:
Depends on:
Blocks:
 
Reported: 2006-07-29 01:22 UTC by Michael-Luke Jones
Modified: 2006-11-11 20:38 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael-Luke Jones 2006-07-29 01:22:24 UTC
Thunderbird 1.5.0.5 was released around 48 hours ago, fixing a critical security issue as well as other more minor security problems. An updated ebuild has made its way into portage, but it is keyworded testing on many architectures despite its critical security status.

Action: Please make Thunderbird 1.5.0.5 stable on x86, ppc, amd64, sparc as soon as possible.
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2006-07-29 01:28:25 UTC
/me points to bug Bug 141842

Whatever, to make our "costumers" happy: arches, please test and stablle thunderbird 1.5.0.5, thanks.
Comment 2 Stefan Cornelius (RETIRED) gentoo-dev 2006-07-29 02:58:46 UTC
ok, expanding this bug: also mark firefox 1.5.0.5 and seamonkey 1.0.3 stable, thank you.
Comment 3 Wolf Giesen (RETIRED) gentoo-dev 2006-07-29 04:38:45 UTC
Stefan, shouldn't we merge this one with thebug you mentioned?
Comment 4 Tobias Scherbaum (RETIRED) gentoo-dev 2006-07-29 04:51:56 UTC
seamonkay and thunderbird already ppc stable, firefox fails to unpack the german language pack:

 * Unpacking firefox-de-1.5.0.5.xpi to /var/tmp/portage/mozilla-firefox-1.5.0.5/work
[/var/tmp/portage/mozilla-firefox-1.5.0.5/distdir/firefox-de-1.5.0.5.xpi]
  End-of-central-directory signature not found.  Either this file is not
  a zipfile, or it constitutes one disk of a multi-part archive.  In the
  latter case the central directory and zipfile comment will be found on
  the last disk(s) of this archive.
unzip:  cannot find zipfile directory in one of /var/tmp/portage/mozilla-firefox-1.5.0.5/distdir/firefox-de-1.5.0.5.xpi or
        /var/tmp/portage/mozilla-firefox-1.5.0.5/distdir/firefox-de-1.5.0.5.xpi.zip, and cannot find /var/tmp/portage/mozilla-firefox-1.5.0.5/distdir/firefox-de-1.5.0.5.xpi.ZIP, period.
Comment 5 Perttu Luukko 2006-07-29 05:31:52 UTC
In reference to #4, the same thing happens with language packs for fi
and en_GB. There seems to be something really fishy in the 1.5.0.5 language
packs, compare the sizes:

firefox-en-GB-1.5.0.4.xpi (137KiB)
firefox-fi-1.5.0.4.xpi (140KiB)

to

firefox-en-GB-1.5.0.5.xpi (686 bytes)
firefox-fi-1.5.0.5.xpi (677 bytes)

Unless these are just pointers to download the actual language pack somewhere else, I don't think ~600B is enough to include localized menus & texts.
Comment 6 Jan Essert 2006-07-29 05:37:17 UTC
FYI, the download procedure seems to be a bit bizarre, see the contents of my firefox-de-1.5.0.5.xpi file:

--13:08:42--  http://releases.mozilla.org/pub/mozilla.org/firefox/releases/1.5.0.5/linux-i
686/xpi/de.xpi
           => `de.xpi.1'
Resolving releases.mozilla.org... 207.200.66.54, 216.165.129.134, 216.165.129.141, ...
Connecting to releases.mozilla.org|207.200.66.54|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 141,050 (138K) [application/x-xpinstall]

    0K .......... .......... .......... .......... .......... 36% 63.0K   0:01
   50K .......... .......... .......... .......... .......... 72% 84.9K
  100K .......... .......... .......... .......              100% 88.2K

13:08:44 (76.03 KB/s) - `de.xpi.1' saved [141050/141050]

don't know how this can have happened ;-)
Could it be a portage bug?
Comment 7 Perttu Luukko 2006-07-29 06:18:04 UTC
Yes, it seems that *all* the language packs for 1.5.0.5 actually contain the
output of wget downloading the language packs :) Side effects of a hasty bump I guess... (well, it did actually take long enough...)

Maybe someone could add the real language packs and fix the Manifest? Thanks.
Comment 8 Wolf Giesen (RETIRED) gentoo-dev 2006-07-29 06:31:17 UTC
Merged with #141842 to avoid irritation.

*** This bug has been marked as a duplicate of 141842 ***