Date: Sat, 22 Oct 2011 21:28:40 +0200 From: =?iso-8859-1?Q?Beat_G=E4tzi?= <beat@FreeBSD.org> To: freebsd-announce@chthonic.com Cc: freebsd-questions@FreeBSD.org Subject: Re: Upgrading libxul, dependency on Firefox 3 Message-ID: <97324B18-C763-4D11-AB7B-30B0DE98E601@FreeBSD.org> In-Reply-To: <20111022005442.GA68656@whisperer.chthonixia.net> References: <20111022005442.GA68656@whisperer.chthonixia.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Oct 22, 2011, at 2:54 AM, Joe Altman wrote: > Greetings... >=20 > I was running portupgrade on libxul and noticed it depends on Firefox > 3.x. I cancelled the upgrade, because I thought FF3.x was insecure and > therefore deprecated while FF7 was recommended and secure. >=20 > My questions: >=20 > 1) is the dependency libxul has for FF3 a security problem? libxul doesn't depend on FF3. We just use the FF3.6 source tarball to build xulrunner (libxul) as upstream no longer provides tarballs for the latest xulrunner 1.9.2.x releases. Nevertheless FF3.6 is still supported upstream and security problems get fixed regularly during the normal Mozilla release cycle. > 2) is the dependency on FF3 a bug in libxul? If it is a bug, who > should receive a report: gecko@ or the Mozilla project? There is no FF3 dependency in libxul. HTH, Beat > FYI: I'm pretty sure it was portsclean -D (and not me) that deleted > FF3...yet libxul tried to pull it in during the portupgrade. >=20 > Best regards, >=20 > Joe > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?97324B18-C763-4D11-AB7B-30B0DE98E601>