From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kei Kebreau Subject: Re: Guix IceCat users have had early access to security fixes Date: Thu, 15 Dec 2016 11:06:39 -0500 Message-ID: <87vaulw50w.fsf@openmailbox.org> References: <87oa0e3t1r.fsf@netris.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:54376) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cHYYn-0001Eq-AD for guix-devel@gnu.org; Thu, 15 Dec 2016 11:07:11 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cHYYj-0000kr-6T for guix-devel@gnu.org; Thu, 15 Dec 2016 11:07:09 -0500 Received: from mail2.openmailbox.org ([62.4.1.33]:37872) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cHYYi-0000gm-Sg for guix-devel@gnu.org; Thu, 15 Dec 2016 11:07:05 -0500 In-Reply-To: <87oa0e3t1r.fsf@netris.org> (Mark H. Weaver's message of "Wed, 14 Dec 2016 20:00:32 -0500") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Mark H Weaver Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Mark H Weaver writes: > Yesterday, Mozilla released Firefox ESR 45.6 and announced several CVEs > fixed by it: > > https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/ > > I'm pleased to announce that Guix users of IceCat have had early access > all of these fixes. > > Since November 30 (commit 9689e71d2f2b5e766415a40d5f5ab267768d217d), > we've had fixes for CVE-2016-9897, CVE-2016-9898, CVE-2016-9899, > CVE-2016-9900, CVE-2016-9904, and 4 out of 11 patches for CVE-2016-9893. > > Since December 3 (commit 5bdec7d634ce0058801cd212e9e4ea56e914ca0c), > we've had the fixes that were later announced as CVE-2016-9901, > CVE-2016-9902, CVE-2016-9905, and another patch for CVE-2016-9893. > > On December 10 (commit 56c394ee4397015d6144dab002ee43fc7e32a331), I > cherry-picked the remaining fixes from the not-yet-released Firefox > ESR 45.6: CVE-2016-9895, and the final six patches for CVE-2016-9893. > > Mark This is excellent news! Thank you very much, Mark! :) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEg7ZwOtzKO2lLzi2m5qXuPBlGeg0FAlhSv48ACgkQ5qXuPBlG eg2VvQ/+MDl5uGG0vkptJcK3XR+AufxxFEAVfNCptYULJ0AjYu8KSa/FKyLCMqd6 Es6gVz4zoaSPcJ8cKFx4EIJDlpv+XHW9v8tzFntgYsyzsKF60aP8p9dWHDZ66Tfb cG4OVX3CW9qAVEoEfKakxNZu/WE4Of2GNyAH7qTiICHa97wD8EzJMEUmqN3HIEwt 8wsq2hstKiZ3wkDWjYAw+ELqRX7Pt95ELicJfa89WUcewUpO38zAUa3BNefmv8Ob b0cEnmovv5/tT2DbKqzKdleRABhXn+mlF54C7zPOhzWB8WT9UWgAD4ZmKckhgaHq /lOT8YwnSZAQEWlI7lXLMqF1rWxdRVboyg6DoKHcp0nXbuZ4f4wTN39nIWCC5fWl qrxcBioU8rjlVyxQkstD6bGatz1Bo/wXlq5b6xDBqkuQP5EnS4uWnwU5c6JQWG9c VXIByFAC6E43cICXOGRnKnMsS+fHxGzxewAhJCB9CUQC0h5MjB5mHTadAAa/wLIe VxOT5SDrNECJH3ABToK2Z0BVj40b6KNOG9lp6OX6Z/Go7qTwFp9XM+R+YB/nz3RC Guet6z3sJfSOvwYQVlshP+b79xLzRSIwYgwOHSa2wpzqJZHEX7X3CBBU6NAQ0+o6 6Ifnnd5RIytv8gkPCC8Y4ySS03RmfBcRD+Gq+R/OYUjxeq1msgw= =tO6K -----END PGP SIGNATURE----- --=-=-=--