1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] [RFC] How to proceed with seamonkey/iceape for security updates and freeze push
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5BRFC%5D%20How%20to%20proceed%20with%20seamonkey/iceape%20for%0A%20security%20updates%20and%20freeze%20push&In-Reply-To=%3C4F7CB632.6090703%40arcor.de%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="013890.html">
<LINK REL="Next" HREF="013906.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] [RFC] How to proceed with seamonkey/iceape for security updates and freeze push</H1>
<B>Florian Hubold</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5BRFC%5D%20How%20to%20proceed%20with%20seamonkey/iceape%20for%0A%20security%20updates%20and%20freeze%20push&In-Reply-To=%3C4F7CB632.6090703%40arcor.de%3E"
TITLE="[Mageia-dev] [RFC] How to proceed with seamonkey/iceape for security updates and freeze push">doktor5000 at arcor.de
</A><BR>
<I>Wed Apr 4 22:59:30 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="013890.html">[Mageia-dev] help with update/testing needed / freeze exception for me-tv
</A></li>
<LI>Next message: <A HREF="013906.html">[Mageia-dev] [RFC] How to proceed with seamonkey/iceape for security updates and freeze push
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#13891">[ date ]</a>
<a href="thread.html#13891">[ thread ]</a>
<a href="subject.html#13891">[ subject ]</a>
<a href="author.html#13891">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Am 26.03.2012 19:46, schrieb Florian Hubold:
><i> Hi all,
</I>><i>
</I>><i> i've taken a look at iceape and locally updated it to 2.7.2¹ after talking with
</I>><i> maintainer
</I>><i> about it, with the intent to at least push this to Mageia 1, because since
</I>><i> initial import
</I>><i> it has not received any security updates (and there are countless security problem)
</I>><i> I've also completed the rebrand to iceape as far as i saw fit (change URL to
</I>><i> release
</I>><i> notes, applied some more debian rebranding patches, removed updater files and
</I>><i> updater menu item, and some more smaller fixes, current svn diff is attached)
</I>><i> and did some cleaning of old and unused stuff.
</I>><i>
</I>><i> ¹: I've only updated it to 2.7.2 as 2.8 does require newer NSPR, and that's a no-go
</I>><i> for Mageia 1, which is my primary target.
</I>><i>
</I>><i>
</I>><i>
</I>><i> The biggest problem is: current maintainer does not have enough time to maintain
</I>><i> it properly, and i'm not planning on doing it either, as i don't use it or know
</I>><i> it well.
</I>><i>
</I>><i> There are at least 3 good options on how to proceed, apart from mga1 update:
</I>><i>
</I>><i>
</I>><i> 1.
</I>><i> push latest version to cauldron, and hope somebody will maintain it afterwards
</I>><i> (this is the worst IMHO, as we'll probably face the same situation with a de-facto
</I>><i> umaintained package throughout Mageia 2 lifetime, which i want to avoid)
</I>><i>
</I>><i>
</I>><i> 2.
</I>><i> drop iceape, package as seamonkey again and sync with Fedora
</I>><i> (this one would at least make maintenance easier, only need to follow Fedora)
</I>><i>
</I>><i>
</I>><i> 3.
</I>><i> drop iceape completely
</I>><i> (actually this has the advantage that users can have official upstream binaries,
</I>><i> and take advantage of automatic updates. Current maintainer agrees with this,
</I>><i> as it's simply too fragile for him to maintain it easily.
</I>><i> If somebody is against this, please step up as maintainer or help the current
</I>><i> maintainer)
</I>><i>
</I>><i>
</I>><i> I'm currently in contact with some seamonkey developers, to maybe clear up
</I>><i> why/if the
</I>><i> rebrand is needed, if it's needed like it's currently done, and why Fedora can
</I>><i> simply
</I>><i> ship seamonkey without the need for a rebrand, but the dialog may take some
</I>><i> time, this
</I>><i> would be only relevant for option 2.
</I>><i>
</I>><i>
</I>><i> If nobody responds, i'll push my current work as security update for Mageia 1,
</I>><i> and drop iceape from cauldron so that we won't have an outdated package and
</I>><i> a potential security risk for Mageia 2.
</I>><i>
</I>><i>
</I>><i> Kind regards
</I>><i>
</I>As there was no real objection, and no other comments
or votes for iceape, i've dropped it from cauldron. FWIW i'm quite
unhappy with this. Related, i've also not got any reply yet to my
aforementioned inquiry about mozilla branding permissions.
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="013890.html">[Mageia-dev] help with update/testing needed / freeze exception for me-tv
</A></li>
<LI>Next message: <A HREF="013906.html">[Mageia-dev] [RFC] How to proceed with seamonkey/iceape for security updates and freeze push
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#13891">[ date ]</a>
<a href="thread.html#13891">[ thread ]</a>
<a href="subject.html#13891">[ subject ]</a>
<a href="author.html#13891">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|