On Fri, 2014-12-05 at 19:17 +0100, Andrey Gursky wrote:
b) everyone knows what's actually contained in that binary blob, since
it's built from open source code, and the build is (supposed to be)
reproductible.
Yes, supposed to be: there are ongoing efforts to allow
reproducible builds
Hi Mike.
From: Mike Hommey m...@glandium.org
b) everyone knows what's actually contained in that binary blob, since
it's built from open source code, and the build is (supposed to be)
reproductible.
Yes, supposed to be: there are ongoing efforts to allow
reproducible builds which will then
Mike Hommey said:
a) it's not in any release of Debian, and it's not in any upcoming
release of Debian either. It's in a package from experimental.
I had no idea I was running experimental packages on a machine with
wheezy and a few wheezy-backports (openssh-server and
On Sat, 2014-11-29 at 08:26 +, Chuck Peters wrote:
That's good to know! However I think many of us would be more
comfortable if the Debian systems built the source.
Not sure whether this is so easy due to the patent issues. It seems the
license where the patent costs are paid by Cisco for
Hey Mike.
On Fri, 2014-11-28 at 00:44 +0900, Mike Hommey wrote:
a) it's not in any release of Debian, and it's not in any upcoming
release of Debian either. It's in a package from experimental.
Well but you know that a lot of people actually run unstable as their
normal suite and many of them
tags 769716 + security
tags 769716 grave
stop
Wow... I've just stumbled over this by accident and this is really
extremely outrageous.
Adding security tag and raising severity to grave, since no one know
what's actually contained in that binary blob, one must basically assume
it's an security
On Thu, Nov 27, 2014 at 03:54:24PM +0100, Christoph Anton Mitterer wrote:
tags 769716 + security
tags 769716 grave
stop
Wow... I've just stumbled over this by accident and this is really
extremely outrageous.
Adding security tag and raising severity to grave, since no one know
what's
Package: iceweasel
Version: 33.1-1
Severity: serious
Justification: Policy ยง2.2.1
On first start, Iceweasel downloads the OpenH264 Video Codec provided
by Cisco Systems, Inc. plugin (which is a binary blob) and enables it
automatically. This happens without asking the user for consent.
Bug
8 matches
Mail list logo
