Firefox 1.5.0.9 still missing in Dapper

Bug #77333 reported by disabled.user
256
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Fix Released
Undecided
Unassigned
mozilla-thunderbird (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: firefox

Firefox 1.5.0.9 has been released by Mozilla since Dec, 19th. (see: http://www.mozilla.org/news.html)

Since this happens to be a security release, I wonder how much longer it will take until updated packages for Dapper will be available. Regarding that Dapper, as an LTS release, also aims at the enterprise market, security-related package-updates should make their way into the repos as fast (say: faster) as possible.

See also: http://robitaille.wordpress.com/2006/12/28/so-where-is-the-latest-firefox-update/

This also affects Thunderbird 1.5.0.9 and Firefox 2.0.0.1 for Edgy.

CVE References

Revision history for this message
David Szent-Györgyi (dszgy) wrote : Bug still unconfirmed 17 days after Mozilla releases update

I know that we are just finishing the end-of-2006 holidays, but seeing no confirmation that this bug report has been read 17 days after the Mozilla Corporation release of a security fix is discouraging.

I would like to offer Ubuntu / Kubuntu to computer-naive friends and relatives, but half the point is to help the friends and relatives escape the security holes of other operating systems. These are people who would need updates that they could download and install without Information Technology skills and without my help.

If Ubuntu can't keep up with security updates to the Ubuntu-customized version, would it make sense to (1) do without the customizations entirely or (2) offer an additional Firefox package that omits those customizations for people who would go without additional features in order to obtain more rapid security updates?

For readers who can't or won't wait: Daniel Robitaille's instructions for manual installation of Mozilla.org's package of Firefox 1.5.0.9 are available at http://robitaille.wordpress.com/2006/12/29/how-to-install-firefox-from-mozillaorg-via-the-command-line-in-ubuntu/ .

Revision history for this message
disabled.user (disabled.user-deactivatedaccount) wrote :

Fix has finally been released (see http://www.ubuntu.com/usn/usn-398-2), but it's taken way too much time for an enterprise-quality-labeled release.

Changed in firefox:
status: Unconfirmed → Fix Released
Revision history for this message
disabled.user (disabled.user-deactivatedaccount) wrote :

Update for Thunderbird has finally been released, too.
(http://www.ubuntu.com/usn/usn-400-1)

Changed in mozilla-thunderbird:
status: Unconfirmed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.