Re: Concerns about Security of packages in Debain OS and the Operating system itself.

2022-04-18 Thread Stephan Verbücheln
> i did the analysis (took 3 weeks) Do you have a publication of that analysis? I was thinking the same about the organization of Debian for some time but never did analysis or compared it to other distros. Also I like to add that reproducible builds are an excellent addition to the mechanisms yo

Re: [SECURITY] [DSA 5113-1] firefox-esr security update

2022-04-18 Thread Elmar Stellnberger
The patch from yesterday could be tested by manually shipping the executable. Today I have developed another patch (since the first one did not resolve it), one that compares against the backtrace with Debian 11 which is known to have a working gcc. The assumption that the Firefox and Qt5/moc