Please remove iceape from Hardy

Bug #206875 reported by William Grant
6
Affects Status Importance Assigned to Milestone
iceape (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: iceape

Please remove iceape from Hardy. It has lots of security issues, and all the binaries are now provided by seamonkey (as transitional packages). Apparently somebody forgot to remove it.

William Grant (wgrant)
Changed in iceape:
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
John Vivirito (gnomefreak) wrote :

William, who confirmed this and what archive admin was asked about this? What security issues do you think you will find in iceape and not seamonkey as they are the same exact package with exception to the branding? I will relay this to mozilla team in care of asac to see if he thinks this is valid for removal. it was going to be removed before final AFAIR but i left home when we were talking about it and havent been home since Jan.

Revision history for this message
John Vivirito (gnomefreak) wrote :

Alexander please let me know what is decided on this.

Changed in iceape:
assignee: nobody → mozilla-bugs
status: Confirmed → Incomplete
Revision history for this message
John Vivirito (gnomefreak) wrote :

I emailed Alexander about this but please answer the above questions. (i dont have Ubuntu pc handy ATM but will when i get home)

Revision history for this message
William Grant (wgrant) wrote : Re: [Bug 206875] Re: Please remove iceape from Hardy

John Vivirito wrote:
> William, who confirmed this and what archive admin was asked about this?

(Me, asac, fta), nobody yet (that's the point of this bug).

As a MOTU and leader of the universe security effort, I noticed that
iceape had the highest count of open security issues of any free package
(ie. not Java) in Hardy. I don't need actually anybody else's
confirmation, but as Mozilla stuff is special, I decided that I should
probably confirm the removal with Mozilla Team people, so asked in their
channel.

fta quickly confirmed that it was a mistake that it was left around, and
asac presumed it was already gone.

It also currently has no binaries published; they're all provided by
seamonkey as transitional packages instead.

> What security issues do you think you will find in iceape and not
> seamonkey as they are the same exact package with exception to the
> branding?

iceape is a much older upstream version (it doesn't even have the
security fixes that were applied to Gutsy).

> I will relay this to mozilla team in care of asac to see if
> he thinks this is valid for removal. it was going to be removed before
> final AFAIR but i left home when we were talking about it and havent
> been home since Jan.

As I said above, both he and fta have acked this.

  status confirmed
  assignee nobody

--
William Grant

Changed in iceape:
assignee: mozilla-bugs → nobody
status: Incomplete → Confirmed
Revision history for this message
John Vivirito (gnomefreak) wrote :

Sorry i thought we decided to remove it a while ago but since ive been gone i didnt realize it was not kept up or removed.

Revision history for this message
Martin Pitt (pitti) wrote :

iceape source does not exist any more in hardy. There is just a transitional package 'iceape' which depends on seamonkey, built by the seamonkey source. So do you guys want me to remove seamonkey from Hardy?

Changed in iceape:
status: Confirmed → Invalid
Changed in seamonkey:
status: Invalid → Incomplete
Revision history for this message
Martin Pitt (pitti) wrote :

I guess the outcome of my question pretty much depends on whether we can provide security support in Hardy for it. CC'ing Alex.

Revision history for this message
Alexander Sack (asac) wrote :

just a transitional package that should stay for hardy.

Changed in seamonkey:
status: Incomplete → Invalid
Revision history for this message
Martin Pitt (pitti) wrote :

oh, madison on drescher lied.

Changed in seamonkey:
status: Invalid → Confirmed
Revision history for this message
Martin Pitt (pitti) wrote :

2008-03-28 10:32:39 INFO creating lockfile
2008-03-28 10:32:43 INFO Removing candidates:
2008-03-28 10:32:43 INFO iceape 1.1.4-1ubuntu2 in hardy
2008-03-28 10:32:43 INFO Removed-by: Martin Pitt
2008-03-28 10:32:43 INFO Comment: superseded by seamonkey
2008-03-28 10:32:43 INFO 1 package successfully removed.

Changed in iceape:
status: Confirmed → Fix Released
Revision history for this message
John Vivirito (gnomefreak) wrote :

https://bugs.edge.launchpad.net/ubuntu/+source/iceape/+bug/206875/comments/8

since that was not done and was removed we are going to have a issue with upgrading to seamonkey i will check with asac and fta to see if we can fix this is seamonkey package but thats a long shot.

Revision history for this message
John Vivirito (gnomefreak) wrote :

nevermind it is still in hardy.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.