Siduction Forum

Siduction Forum => Upgrade Warnings => Topic started by: cas on 2015/08/07, 19:17:12

Title: when to update iceweasel?
Post by: cas on 2015/08/07, 19:17:12
firefox/iceweasel users are strongly advised to update to 39.03 / ESR 38.1.1
http://www.zdnet.com/article/mozilla-urges-users-to-update-firefox-with-file-stealing-exploit-in-wild/

When I try, many other packages would be updated, probably related to the gcc transition.

So,  what are we supposed to do?
Is it wise to wait until the transition is over?

Thnx, C
Title: Re: when to update iceweasel?
Post by: ayla on 2015/08/07, 19:35:34
Can't answer your question, but as we have a strong warning about the ongoing transition, I would like to add one:

Would it help to switch of the pdf preview in iceweasel, using okular insteed?
Title: Re: when to update iceweasel?
Post by: der_bud on 2015/08/07, 20:06:25
...Would it help to switch of the pdf preview in iceweasel, using okular insteed?

I asked that question in a comment at the blog of a mozilla representative (waiting for moderation atm). There are more infos (https://www.soeren-hentzschel.at/mozilla/firefox/2015/08/07/firefox-39-0-3-esr-38-1-1-mozilla-behebt-sicherheitsluecke-in-pdf-betrachter/) about this security issue:
Quote from: SoerenHentzschel
Update: Mozilla hat eine ausführliche Ankündigung veröffentlicht (https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/). Demnach existiert die Sicherheitslücke auf Windows, OS X sowie auf Linux, bekannt ist aber nur die Ausnutzung auf Windows und Linux. Wer Windows oder Linux nutzt, sollte alle gespeicherten Passwörter und Schlüssel in den folgenden Dateien ändern:

    "On Windows the exploit looked for subversion, s3browser, and Filezilla configurations files, .purple and Psi+ account information, and site configuration files from eight different popular FTP clients. On Linux the exploit goes after the usual global configuration files like /etc/passwd, and then in all the user directories it can access it looks for .bash_history, .mysql_history, .pgsql_history, .ssh configuration files and keys, configuration files for remina, Filezilla, and Psi+, text files with “pass” and “access” in the names, and any shell scripts."

__
edit: following the links above I can find Firefox as affected by this. Does anybody know if Iceweasel is concerned?
Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/07, 20:11:41
One way to get the newest "iceweasel" is to download firefox and run it from a folder in your user directory, no installation needed and it will use all your settings/bookmarks from iceweasel. This could then be used until we can do a proper d-u.

But I have no idea if above method is recommended and/or if it will help for this issue.

Maybe someone who understand more about this can suggest if this will be ok?
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/07, 20:14:54
@vilde - one way would be: use your brain and read the changelog
@cas: apt-get install iceweasel should do the trick

@all:
Code: [Select]
iceweasel (38.1.1esr-1) unstable; urgency=high

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.

  * debian/source.filter: Remove the source tarball filtering of search plugin
    icons. See 20150715221703.GD19084@glandium.org.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 08:34:19 +0900

Code: [Select]
iceweasel (39.0.3-1~bpo70+1) UNRELEASED; urgency=medium

  * Rebuild for wheezy-backports.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 09:07:54 +0900

iceweasel (39.0.3-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.

  * debian/source.filter: Remove the source tarball filtering of search plugin
    icons. See 20150715221703.GD19084@glandium.org.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 08:52:52 +0900
Title: Re: when to update iceweasel?
Post by: der_bud on 2015/08/07, 20:49:49
... @cas: apt-get install iceweasel should do the trick ...
Looks here like
Code: [Select]
LANG=C apt-get install iceweasel iceweasel-l10n-de
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:
  cpp-5 gcc-5 gcc-5-base gcc-5-base:i386 libasan2 libatomic1 libcc1-0 libcilkrts5 libgcc-5-dev libgcc1 libgcc1:i386 libgfortran3 libgomp1
  libitm1 liblsan0 libmpx0 libquadmath0 libstdc++6 libstdc++6:i386 libtsan0 libubsan0
Suggested packages:
  gcc-5-locales gcc-5-multilib gcc-5-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasan2-dbg liblsan0-dbg libtsan0-dbg
  libubsan0-dbg libcilkrts5-dbg libmpx0-dbg libquadmath0-dbg fonts-stix otf-stix fonts-oflb-asana-math fonts-mathjax mozplugger libgnomeui-0
The following packages will be REMOVED:
  digikam digikam-private-libs kipi-plugins libdap17 libdapclient6 libdapserver7 libgdal1h powertop qlandkartegt
The following packages will be upgraded:
  cpp-5 gcc-5 gcc-5-base gcc-5-base:i386 iceweasel iceweasel-l10n-de libasan2 libatomic1 libcc1-0 libcilkrts5 libgcc-5-dev libgcc1
  libgcc1:i386 libgfortran3 libgomp1 libitm1 liblsan0 libmpx0 libquadmath0 libstdc++6 libstdc++6:i386 libtsan0 libubsan0
23 upgraded, 0 newly installed, 9 to remove and 284 not upgraded.
Need to get 95.0 MB of archives.
After this operation, 55.8 MB disk space will be freed.
Do you want to continue? [Y/n]
For some days I could do without digikam and qlandkarte, don't know what other people's systems do
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/07, 21:18:34
nobody claims that the biggest transition since years is pure fun - but nice to cleanup the own system, get familar with not so often used features of the packagemanagement and so on :)
Title: Re: when to update iceweasel?
Post by: cas on 2015/08/07, 21:21:57
@vilde Thnx, nice answer

@melmarker Does the trick? Seems too clever. Not only libreoffice is removed. I wonder, whether there are lurking further problems I cannot see by the half-baken transition. That's the reason I asked the question.
 
Code: [Select]
   apt-get install -s iceweasel
HINWEIS: Dies ist nur eine Simulation!
         apt-get benötigt root-Privilegien für die reale Ausführung.
         Behalten Sie ebenfalls in Hinterkopf, dass die Sperren deaktiviert
         sind, verlassen Sie sich also bezüglich des reellen aktuellen
         Status der Sperre nicht darauf!
Paketlisten werden gelesen... Fertig
Abhängigkeitsbaum wird aufgebaut.       
Statusinformationen werden eingelesen.... Fertig
Die folgenden zusätzlichen Pakete werden installiert:
  cpp-5 gcc-5 gcc-5-base iceweasel-l10n-de libasan2 libatomic1 libcc1-0 libcilkrts5
  libgcc-5-dev libgcc1 libgfortran3 libgomp1 libitm1 libmpx0 libquadmath0
  libreoffice-common libstdc++6 libubsan0
Vorgeschlagene Pakete:
  gcc-5-locales gcc-5-multilib gcc-5-doc libgcc1-dbg libgomp1-dbg libitm1-dbg
  libatomic1-dbg libasan2-dbg liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg
  libmpx0-dbg libquadmath0-dbg fonts-stix otf-stix fonts-oflb-asana-math fonts-mathjax
  mozplugger libreoffice-style-crystal libreoffice-style-hicontrast
  libreoffice-style-oxygen libreoffice-style-sifr libreoffice-style-tango
Empfohlene Pakete:
  gstreamer1.0-libav xfonts-mathml python3-uno
Die folgenden Pakete werden ENTFERNT:
  libboost-date-time1.54.0 libboost-date-time1.55.0 libcmis-0.3-3 libcmis-0.4-4
  libcmis-0.5-5 libreoffice-base-core libreoffice-calc libreoffice-core libreoffice-draw
  libreoffice-help-de libreoffice-impress libreoffice-writer
Die folgenden Pakete werden aktualisiert (Upgrade):
  cpp-5 gcc-5 gcc-5-base iceweasel iceweasel-l10n-de libasan2 libatomic1 libcc1-0
  libcilkrts5 libgcc-5-dev libgcc1 libgfortran3 libgomp1 libitm1 libmpx0 libquadmath0
  libreoffice-common libstdc++6 libubsan0
19 aktualisiert, 0 neu installiert, 12 zu entfernen und 242 nicht aktualisiert.
Remv libcmis-0.3-3 [0.3.1-5]
Remv libboost-date-time1.54.0 [1.54.0+dfsg-7]
Remv libreoffice-calc [1:4.4.4-1]
Remv libreoffice-help-de [1:4.4.4-1]
Remv libreoffice-writer [1:4.4.4-1]
Remv libreoffice-base-core [1:4.4.4-1]
Remv libreoffice-core [1:4.4.4-1] [libreoffice-impress:i386 libreoffice-draw:i386 ]
Remv libcmis-0.4-4 [0.4.1-7] [libreoffice-impress:i386 libreoffice-draw:i386 ]
Remv libboost-date-time1.55.0 [1.55.0+dfsg-4] [libreoffice-impress:i386 libcmis-0.5-5:i386
libreoffice-draw:i386 ]
Remv libcmis-0.5-5 [0.5.0-2] [libreoffice-impress:i386 libreoffice-draw:i386 ]
Remv libreoffice-impress [1:4.4.4-1] [libreoffice-draw:i386 ]
Remv libreoffice-draw [1:4.4.4-1]
Inst libitm1 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) []
Inst gcc-5-base [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libcc1-0:i386 libmpx0:i386 cp
p-5:i386 libquadmath0:i386 libatomic1:i386 libstdc++6:i386 libasan2:i386 libgomp1:i386 libg
fortran3:i386 libcilkrts5:i386 libgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Conf gcc-5-base (5.2.1-14 Debian:unstable [i386]) [libcc1-0:i386 libmpx0:i386 cpp-5:i386 li
bquadmath0:i386 libatomic1:i386 libstdc++6:i386 libasan2:i386 libgomp1:i386 libgfortran3:i3
86 libcilkrts5:i386 libgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libstdc++6 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libcc1-0:i386 libmpx0:i386 cp
p-5:i386 libquadmath0:i386 libatomic1:i386 libasan2:i386 libgomp1:i386 libgfortran3:i386 li
bcilkrts5:i386 libgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Conf libstdc++6 (5.2.1-14 Debian:unstable [i386]) [libcc1-0:i386 libmpx0:i386 cpp-5:i386 li
bquadmath0:i386 libatomic1:i386 libasan2:i386 libgomp1:i386 libgfortran3:i386 libcilkrts5:i
386 libgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libcc1-0 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libquad
math0:i386 libatomic1:i386 libasan2:i386 libgomp1:i386 libgfortran3:i386 libcilkrts5:i386 l
ibgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libgomp1 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libquad
math0:i386 libatomic1:i386 libasan2:i386 libgfortran3:i386 libcilkrts5:i386 libgcc1:i386 li
bubsan0:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libatomic1 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libqu
admath0:i386 libasan2:i386 libgfortran3:i386 libcilkrts5:i386 libgcc1:i386 libubsan0:i386 g
cc-5:i386 libgcc-5-dev:i386 ]
Inst libasan2 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libquad
math0:i386 libgfortran3:i386 libcilkrts5:i386 libgcc1:i386 libubsan0:i386 gcc-5:i386 libgcc
-5-dev:i386 ]
Inst libubsan0 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libqua
dmath0:i386 libgfortran3:i386 libcilkrts5:i386 libgcc1:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libcilkrts5 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libmpx0:i386 cpp-5:i386 libq
uadmath0:i386 libgfortran3:i386 libgcc1:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libmpx0 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [cpp-5:i386 libquadmath0:i386 lib
gfortran3:i386 libgcc1:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libquadmath0 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [cpp-5:i386 libgfortran3:i38
6 libgcc1:i386 gcc-5:i386 libgcc-5-dev:i386 ]
Inst libgcc-5-dev [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [cpp-5:i386 libgfortran3:i38
6 libgcc1:i386 gcc-5:i386 ]
Inst gcc-5 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [cpp-5:i386 libgfortran3:i386 libgc
c1:i386 ]
Inst cpp-5 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libgfortran3:i386 libgcc1:i386 ]
Inst libgfortran3 [5.1.1-14] (5.2.1-14 Debian:unstable [i386]) [libgcc1:i386 ]
Inst libgcc1 [1:5.1.1-14] (1:5.2.1-14 Debian:unstable [i386])
Conf libgcc1 (1:5.2.1-14 Debian:unstable [i386])
Inst libreoffice-common [1:4.4.4-1] (1:4.4.5-2 Debian:unstable [all])
Inst iceweasel-l10n-de [1:38.1.0esr-3] (1:38.1.1esr-1 Debian:unstable [all]) []
Inst iceweasel [38.1.0esr-3] (38.1.1esr-1 Debian:unstable [i386])
Conf libitm1 (5.2.1-14 Debian:unstable [i386])
Conf libcc1-0 (5.2.1-14 Debian:unstable [i386])
Conf libgomp1 (5.2.1-14 Debian:unstable [i386])
Conf libatomic1 (5.2.1-14 Debian:unstable [i386])
Conf libasan2 (5.2.1-14 Debian:unstable [i386])
Conf libubsan0 (5.2.1-14 Debian:unstable [i386])
Conf libcilkrts5 (5.2.1-14 Debian:unstable [i386])
Conf libmpx0 (5.2.1-14 Debian:unstable [i386])
Conf libquadmath0 (5.2.1-14 Debian:unstable [i386])
Conf libgcc-5-dev (5.2.1-14 Debian:unstable [i386])
Conf cpp-5 (5.2.1-14 Debian:unstable [i386])
Conf gcc-5 (5.2.1-14 Debian:unstable [i386])
Conf libgfortran3 (5.2.1-14 Debian:unstable [i386])
Conf libreoffice-common (1:4.4.5-2 Debian:unstable [all])
Conf iceweasel (38.1.1esr-1 Debian:unstable [i386])
Conf iceweasel-l10n-de (1:38.1.1esr-1 Debian:unstable [all])
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/07, 21:47:19
@cas - libreoffice from the document foundation works without flaws, kano also has mirrored packages - unfortunally the experimental version of LO (thought as a fix for the new dependencies was built against libboost-$foo1.55, current and working is 1.5.8) so i would let it go and use current packages from the document foundation.

Second solution - use a different browser or wait
Title: Re: when to update iceweasel?
Post by: michaa7 on 2015/08/07, 23:01:50
...
So,  what are we supposed to do?
Is it wise to wait until the transition is over?


If you don't like to fumble around with substitute packages from various non Debian sources just abstain to use IW for the time being. As a temporal fallback you probabely (worked here) may install or update chromium without dependencies to other packages (you may import your bookmarks to it).
Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/07, 23:20:17
@ melmarker, I don't like your tone, you don't have to be rude. I'm just a user here no developer, I don't read changelogs because I normally don't not understand anything in them.  And the first thing I did was to try to update iceweasel but it want's to remove a lot of packages of which I don't know anything or what they belongs to so I didn't. 


@vilde - one way would be: use your brain and read the changelog
@cas: apt-get install iceweasel should do the trick

@all:
Code: [Select]
iceweasel (38.1.1esr-1) unstable; urgency=high

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.

  * debian/source.filter: Remove the source tarball filtering of search plugin
    icons. See 20150715221703.GD19084@glandium.org.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 08:34:19 +0900

Code: [Select]
iceweasel (39.0.3-1~bpo70+1) UNRELEASED; urgency=medium

  * Rebuild for wheezy-backports.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 09:07:54 +0900

iceweasel (39.0.3-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.

  * debian/source.filter: Remove the source tarball filtering of search plugin
    icons. See 20150715221703.GD19084@glandium.org.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 08:52:52 +0900
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/07, 23:22:04
sorry - couldn't test any of the frosted animals - i use the original for years now - if one want to use firefox or thunderbird not systemwide, local installations (in the userdir) might be sufficient
Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/07, 23:28:02
thanks ;)
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/07, 23:33:22
@vilde: sorry for beeing rude

All of us should have in mind that we are in the biggest transition in debian ever - so a lot of packages will break. This is not a problem for the debian developers nor should it be for us. The solution for most of the problems is doing nothing, some problems (security wise) can be solved with partial upgrades as described in the gcc fallout thread http://forum.siduction.org/index.php?topic=5719.0 And at some point one have to descide what is his most important goal - a full working system, current packages, security upgrades. If doing nothing is not an option one will have to let some packages go. Fortunally for Libre Office is the workaround with the project packages.

I suggest to get familar with these options and workarounds - the transition will last longer as we think (devil bets on 3-4 weeks iirc, i would bet on the double or triple time)
Title: Re: when to update iceweasel?
Post by: clubex on 2015/08/08, 00:58:06
While this gcc transition is occuring I've switched to a stable dstro. A step backward but less problems. I'll return to siduction as my everyday system when unstabke has settled down.
Title: Re: when to update iceweasel?
Post by: tux on 2015/08/08, 04:26:15
Maybe Ubuntu people have already packaged up-to-date firefox to their PPAs and maybe it also installable to siduction.
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/08, 07:47:41
never ever think of. never!
Title: Re: when to update iceweasel?
Post by: piper on 2015/08/08, 13:58:28
Quote from: tux
Maybe Ubuntu people have already packaged up-to-date firefox to their PPAs and maybe it also installable to siduction.


Ouch, trouble is ubuntu and debian aren't binary compatible, read the link in my sig

If you want an up-to-date firefox, use nightly, I've been using it since the day it came out, reminds me of sid, updates once or more a day, never had a problem with it.

my nightly version as of today and will be upgraded probably around 9:00 am EST    -    42.0a1 (2015-08-07)
Title: Re: when to update iceweasel?
Post by: michaa7 on 2015/08/08, 15:35:35
Quote from: tux
Maybe Ubuntu people have already packaged up-to-date firefox to their PPAs and maybe it also installable to siduction.
...
If you want an up-to-date firefox, use nightly, I've been using it since the day it came out, reminds me of sid, updates once or more a day, never had a problem with it.

So which repo do you use?

Here (http://mozilla.debian.net/) I only find experimental, but no nightly.

Edit:

Ok, you are using FF not IW. So you simply d/l and untar it into an user/home/XY directory?
Title: Re: when to update iceweasel?
Post by: sedonix on 2015/08/08, 23:53:55
If you want the latest and greatest Iceweasel, add this to your sources.

Code: [Select]
deb http://mozilla.debian.net/ experimental iceweasel-aurora
41.0~a2420150711004006-1
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/08, 23:58:15
oh, cool, another useless suggestion for the moment - please mention that we are in a fucking big transition right now and some combinations of several packages just dont work atm™
Title: Re: when to update iceweasel?
Post by: piper on 2015/08/09, 00:01:15
Quote from: michaa7
Quote from: piper on Today at 07:58:28 AM (http://forum.siduction.org/index.php?topic=5734.msg46807#msg46807)Quote from: tuxMaybe Ubuntu people have already packaged up-to-date firefox to their PPAs and maybe it also installable to siduction....
If you want an up-to-date firefox, use nightly, I've been using it since the day it came out, reminds me of sid, updates once or more a day, never had a problem with it.
So which repo do you use?

Here (http://mozilla.debian.net/) I only find experimental, but no nightly.

Edit:

Ok, you are using FF not IW. So you simply d/l and untar it into an user/home/XY directory?

You can use either /home or /opt, I use /opt, I have used /home many times, neither gave me a problem ;)


I use my /.mozilla folder across different distro's , (linux) roms, (android)  and windows with no problems, it just works.

I use nightly on android also ;)
Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/09, 00:19:26
I have a question. I have since some time used Iceweasel from debian experimental, installed is " Version: 39.0.3-1" As I don't really understand if there is a difference between versions from experimental and unstable I just want to ask: Is my version ok or also not good?
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/09, 01:14:39
have a look at the output:
Code: [Select]
# apt-cache policy iceweasel
iceweasel:
  Installiert:           (keine)
  Installationskandidat: 38.1.1esr-1
  Versionstabelle:
     39.0.3-1 0
          1 http://ftp.de.debian.org/debian/ experimental/main amd64 Packages
     38.1.1esr-1 0
        500 http://ftp.de.debian.org/debian/ unstable/main amd64 Packages
     38.1.0esr-3 0
        500 http://ftp.de.debian.org/debian/ testing/main amd64 Packages
39.0.3 is the current version, but because the slots in unstable and testing are blocked by the esr-version, Sounds stupid, but isn't. unstable and testing are the internal distributions to develop the next stable, so having esr in testing and unstable make sense. so only experimental is left for the current release. Thats where the mozilla repository jumps in. So there is no good and no bad - the esr is conservative and fine with long term support, the current release is fine, beta and aurora is for people who are cool and don't do any useful work  with the browser (aka web design or such things) 8) (sorry, devil :D )

the beta and aurora versions are fine too - but have often problems with correct rendering, which make them not feasable for webdesign, but mostly for daily browsing - and the more people use them and report useful bugs (rendering, new implemented functionality and so on) the better the finally released version will be.

Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/09, 09:35:02
So both have a fix for the exploit, ok

Code: [Select]
# apt-cache policy iceweasel
iceweasel:
  Installerad: 39.0-1
  Kandidat:    39.0-1
  Versionstabell:
     39.0.3-1 0
          1 http://ftp.debian.org/debian/ experimental/main amd64 Packages
 *** 39.0-1 0
        100 /var/lib/dpkg/status
     38.1.1esr-1 0
        500 http://http.debian.net/debian/ unstable/main amd64 Packages[/code
Title: Re: when to update iceweasel?
Post by: KrunchTime on 2015/08/09, 22:29:28
One way to get the newest "iceweasel" is to download firefox and run it from a folder in your user directory, no installation needed and it will use all your settings/bookmarks from iceweasel.
+1  I learned to do this awhile ago via a tip over in the CrunchBang forums.  On new installs, I always purge Iceweasel and just use the stand alone version of Firefox.
Title: Re: when to update iceweasel?
Post by: KrunchTime on 2015/08/09, 22:43:38
Maybe Ubuntu people have already packaged up-to-date firefox to their PPAs and maybe it also installable to siduction.
But you don't even need to use an Ubuntu PPA.  Just download the archived folder from Mozilla, decompress the folder and move to your preferred location; e.g. /home/<user>/bin.  Firefox can be updated via the About Firefox menu option; very simple, very easy.

I can't speak for getting the appropriate entry in the menu system of whatever desktop environment one may use.  I use openbox and it's very simple to create a menu entry for the openbox menu.
Title: Re: when to update iceweasel?
Post by: seasons on 2015/08/09, 22:59:37
oh, cool, another useless suggestion for the moment - please mention that we are in a fucking big transition right now and some combinations of several packages just dont work atm™

At your own suggestion, I think you need more beer and/or popcorn. :)
Title: Re: when to update iceweasel?
Post by: domicius on 2015/08/10, 21:52:41
If you want the latest and greatest Iceweasel, add this to your sources.

Code: [Select]
deb http://mozilla.debian.net/ experimental iceweasel-aurora
41.0~a2420150711004006-1

sedonix, unfortunately, this isn't the latest and greatest from Mozilla. In fact, the bug isn't solved in this version, as you can see, this version is from July 11th.


I have a question. I have since some time used Iceweasel from debian experimental, installed is " Version: 39.0.3-1" As I don't really understand if there is a difference between versions from experimental and unstable I just want to ask: Is my version ok or also not good?

So both have a fix for the exploit, ok

Code: [Select]
# apt-cache policy iceweasel
iceweasel:
  Installerad: 39.0-1
  Kandidat:    39.0-1
  Versionstabell:
     39.0.3-1 0
          1 http://ftp.debian.org/debian/ experimental/main amd64 Packages
 *** 39.0-1 0
        100 /var/lib/dpkg/status
     38.1.1esr-1 0
        500 http://http.debian.net/debian/ unstable/main amd64 Packages[/code

vilde, both versions don't have the fix, only the 39.0.3 and as per your last "apt-cache policy iceweasel" result, it looks like you don't have the fixed version installed.
Title: Re: when to update iceweasel?
Post by: melmarker on 2015/08/11, 00:44:04
apt-get changelog iceweasel
apt-get changelog iceweasel/experimental

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.
 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 ...

hmm - and i trust Mike somewhat, i think he knows what he is doing. And i think it was wise that vilde has asked _before_ the update. But thats only my opinion.
Title: Re: when to update iceweasel?
Post by: der_bud on 2015/08/11, 09:45:16
melmarker, i think your changelog is from 39.0.3-1 ? While vildes 'apt-cache policy' output states he has still the unfixed version 39.0-1 (without .3) installed.
Title: Re: when to update iceweasel?
Post by: vilde on 2015/08/11, 10:42:50
Now it looks better :)
Code: [Select]
# apt-cache policy iceweasel
iceweasel:
  Installerad: 39.0.3-1
  Kandidat:    39.0.3-1
  Versionstabell:
 *** 39.0.3-1 0
          1 http://ftp.debian.org/debian/ experimental/main amd64 Packages
        100 /var/lib/dpkg/status
     38.1.1esr-1 0
        500 http://http.debian.net/debian/ unstable/main amd64 Packages
Title: Re: when to update iceweasel?
Post by: domicius on 2015/08/11, 16:38:11
hmm - and i trust Mike somewhat, i think he knows what he is doing. And i think it was wise that vilde has asked _before_ the update. But thats only my opinion.

I trust Mike as well (and thankful for everything he's doing btw). ;) It was just what der_bud noticed as well, and all is good now. :)

But then, myself using the aurora release, I had to switch to Firefox build for the moment, as it seems Mike has updated only the stable release...