WeeklyUpdates/2007-02-05

« previous week | index | next week »

Meeting Details

• 1:00pm PST (21:00 UTC)
• Mozilla HQ, 1st floor conference table
• +1 866 879 4799 (pin 369) Conf# 8600 (US Toll Free)
• +1 650 903 0800 x91 Conf# 8600 (US/International)
• [Use *1 to mute yourself]
• join irc.mozilla.org #staffmeeting for attendance taking

Development Updates

Fx/TB 1.5.0.10 + Fx 2.0.0.2

• QA spent most of last week testing Vista changes on the Trunk. Test results were positive and we are ready to land the fixes on the branch.
• Still in holding pattern for a couple must-have blockers:
  • https://bugzilla.mozilla.org/show_bug.cgi?id=368763 - Arbitrary code execution by using javascript: url with <img> tag (needs new owner and patch)
  • https://bugzilla.mozilla.org/show_bug.cgi?id=326877 - menupopup.showPopup() can be abused (have partial patch, dveditz looking into a more complete solution)
• Fixes ready to land today (Monday 1/5):
  • https://bugzilla.mozilla.org/show_bug.cgi?id=360493 - (CVE-2006-6077) – Cross-Site Forms + Password Manager = Security Failure (mconnor landing today)
  • All Vista Bugs (rstrong/sspitzer preparing branch patches for landing today)
    • Including Y! IM/default browser bug fix from rstrong
• Not holding release, but will take patch if we get it soon:
  • https://bugzilla.mozilla.org/show_bug.cgi?id=368958 - Cross-window/openDialog object reference handling broken in post 2006-11-09 builds (waiting reviews from jst)

• Shooting for RC1 tomorrow (if we get the fixes we want)

IT

• www.mozilla.com is moving to GLSB tomorrow
• mozilla.com DNS will be proxied by dyndns on Thursday
• Webtools migration to physical hardware. **please test**
  • (bonsai|bonsai-l10n|lxr|mxr|webtools|tinderbox)-stage.mozilla.org
• Bugzilla memory upgrade this week
• Working with build on tier one infra migration
• Remora staging, load testing, support
• Dave is a RHCE - 100% on test :-)

Build

• Put out an RFC in the newsgroup for changing the tree closure policy in regards to SeaMonkey performance regressions. Perf regressions will no longer be cause to close the tree; build regressions will continue to prompt tree closures.
• We're working through the Tinderbox support policy with IT; expect an announcement on that next week.
• Coop has started working on getting projects their own identities/ssh keys; we'll be contacting the people doing release work in the community for Camino, SeaMonkey, and others to help them get setup with this new infrastructure.