Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-28 Thread Rob Owens
On Wed, Jan 27, 2010 at 08:57:05AM +0100, Sven Joachim wrote:
> On 2010-01-27 02:36 +0100, Rob Owens wrote:
> 
> > Anyway, I've now installed Iceweasel 3.5 from backports.  I just wish I
> > could have gotten it from the Debain main repo that I know and trust.
> > This is not a shot against the guys who run backports.org.  It's just
> > that I don't think backports is intended to be a substitute for
> > security.debian.org.
> 
> You can trust backports.org insofar as only Debian developers can upload
> packages there and only backports of versions that are already in
> testing are allowed.  I think that making backports.org officially
> supported (as much as testing and unstable) is the goal, but lack of
> manpower for security support holds this back for now.
> 
That's good to know.  Thanks for the info.

-Rob


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-26 Thread Sven Joachim
On 2010-01-27 02:36 +0100, Rob Owens wrote:

> On Fri, Jan 22, 2010 at 09:21:55PM +0100, Sven Joachim wrote:
>> 
>> Not really, actually security support for Iceweasel could end rather
>> soon.
>> 
>> http://www.debian.org/releases/lenny/i386/release-notes/ch-information.en.html#mozilla-security
>> 
>
> I'm concerned about the way this is handled.  I understand that
> continuing support in Debian once upstream support has stopped may be
> infeasible, but is ceasing support while offering no alternatives (and
> not much warning) really the best solution?

There are certainly alternatives, basically any package that provides
the www-browser virtual package.

> I'll confess that I never read the release notes until now, but I think
> admins should get more warning about this issue.  In the release notes, 
> "Your web browser will cease to get security updates" falls in between a
> notice that "NetworkManager doesn't play nice with NIS" and "There are
> no huge changes in the KDE Desktop".  An internet app w/o security
> updates seems vastly more important than the issues that surround it in
> the release notes.

Personally I would prefer if packages whose security support has ended
were removed in point releases, but that is not always possible because
other packages may (build-)depend on them.  Such was the case with
Iceape in Etch.

> At the very least what I would have liked to see was an update to
> Iceweasel that doesn't actually update the software, but issues a
> warning to the admin that security updates have ceased.  One step better
> would be to include a supported version of Iceweasel in Lenny main.  I
> know it's against Debian policy to add new versions during a stable
> release.

Yes.  New versions have to be installed from backports.org.  In case of
Iceweasel there is also the problem that Debian ships many extensions
which may not be compatible with a new major version.

> But isn't it also Debian policy to provide security updates for
> the life of the release?  (I may be assuming that last bit, but I hope
> not).

Yes, in the case of Mozilla packages it is lack of manpower and upstream
support that defeats this, unfortunately.

> Anyway, I've now installed Iceweasel 3.5 from backports.  I just wish I
> could have gotten it from the Debain main repo that I know and trust.
> This is not a shot against the guys who run backports.org.  It's just
> that I don't think backports is intended to be a substitute for
> security.debian.org.

You can trust backports.org insofar as only Debian developers can upload
packages there and only backports of versions that are already in
testing are allowed.  I think that making backports.org officially
supported (as much as testing and unstable) is the goal, but lack of
manpower for security support holds this back for now.

Sven


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-26 Thread Rob Owens
On Fri, Jan 22, 2010 at 09:21:55PM +0100, Sven Joachim wrote:
> On 2010-01-22 21:17 +0100, Boyd Stephen Smith Jr. wrote:
> 
> > From what I understand, the debian-security guys will still backport fixes 
> > to 
> > iceweasel in Lenny as needed until security support is terminated for Lenny.
> 
> Not really, actually security support for Iceweasel could end rather
> soon.
> 
> http://www.debian.org/releases/lenny/i386/release-notes/ch-information.en.html#mozilla-security
> 

I'm concerned about the way this is handled.  I understand that
continuing support in Debian once upstream support has stopped may be
infeasible, but is ceasing support while offering no alternatives (and
not much warning) really the best solution?

I'll confess that I never read the release notes until now, but I think
admins should get more warning about this issue.  In the release notes, 
"Your web browser will cease to get security updates" falls in between a
notice that "NetworkManager doesn't play nice with NIS" and "There are
no huge changes in the KDE Desktop".  An internet app w/o security
updates seems vastly more important than the issues that surround it in
the release notes.

At the very least what I would have liked to see was an update to
Iceweasel that doesn't actually update the software, but issues a
warning to the admin that security updates have ceased.  One step better
would be to include a supported version of Iceweasel in Lenny main.  I
know it's against Debian policy to add new versions during a stable
release.  But isn't it also Debian policy to provide security updates for
the life of the release?  (I may be assuming that last bit, but I hope
not).

Anyway, I've now installed Iceweasel 3.5 from backports.  I just wish I
could have gotten it from the Debain main repo that I know and trust.
This is not a shot against the guys who run backports.org.  It's just
that I don't think backports is intended to be a substitute for
security.debian.org.

-Rob


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-25 Thread Kelly Clowers
On Fri, Jan 22, 2010 at 20:39, Sven Joachim  wrote:
> On 2010-01-22 21:02 +0100, Camaleón wrote:
>
>> As Mozilla has stopped the support (no more security patches) for Firefox
>> releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is
>> shipped with 3.0.6 (this situation was properly advised on Releases
>> Notes), I wonder what could be the best way to install the latest Firefox
>> 64 bits version.
>
> I'm afraid the answer is "build it from source yourself".  There's no
> official 64-bit tarball (and most likely there won't be any before
> Firefox 4.0), and builds from other distributions will likely require
> newer libraries than available in Lenny.

But there are 64-bit Linux nightlies available. And if you dl, extract and
run one of those, it will automatically update from trunk (i.e. it will never
branch for 3.7, just move from 3.7pre to 3.8pre). I have found nightlies
to be very stable, as is the 64-bit Flash beta (the only plugin I use).


Cheers,
Kelly Clowers


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-23 Thread Camaleón
On Fri, 22 Jan 2010 16:50:57 -0600, Boyd Stephen Smith Jr. wrote:

> On Friday 22 January 2010 16:28:37 Camaleón wrote:

>> So, do you think the package will be available in backports for stable
>> release (Lenny) or just indicates the package is being tested for
>> another branch (unstable/testing)? :-?

(...)
 
> As far as iceweasel availability in backports goes, see Sven Hoexter's
> message.

Okay, thanks for your detailed response, I really appreciate it :-)

I think I'll wait a bit to see if it gets available under "backports" and 
try to update from there. 

I just have arrived to Debian (switched from openSUSE) and I'm still not 
so skilled with the requirements for package compilation in this 
distribution.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-23 Thread mess-mate

Sven Hoexter wrote:


On Fri, Jan 22, 2010 at 09:39:27PM +0100, Sven Joachim wrote:
  

On 2010-01-22 21:02 +0100, Camaleón wrote:


As Mozilla has stopped the support (no more security patches) for Firefox 
releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is 
shipped with 3.0.6 (this situation was properly advised on Releases 
Notes), I wonder what could be the best way to install the latest Firefox 
64 bits version.
  

I'm afraid the answer is "build it from source yourself".  There's no
official 64-bit tarball (and most likely there won't be any before
Firefox 4.0), and builds from other distributions will likely require
newer libraries than available in Lenny.



Alexander Reichle-Schmehl added Iceweasel 3.5 and the complementing
xulrunner release to backports.org a few days ago. So far I can see build
packages for amd64 and ppc.
https://buildd.debian.org/status/package.php?p=iceweasel&suite=lenny-backports

If and when backports of Iceweasel 3.6 will be available depends on when
it will enter testing and if it's possible to build it on lenny.

Sven
  


The latest firefox is 3.7.

I'm running firefox 3.6 Beta4 and it runs as a charm (amd64).

http://www.mozilla.com/en-US/firefox/3.6/releasenotes/

mess-mate


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org




Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Boyd Stephen Smith Jr.
On Friday 22 January 2010 16:28:37 Camaleón wrote:
> And went to backport lists and saw some movement on this:
> 
> ***
> Accepted iceweasel 3.5.6-1~bpo50+1 (source all amd64)
> http://lists.backports.org/lurker-bpo/message/20100116.120653.e7d54ae9.en.h
> tml ***
> 
> But I don't know what does it mean. This is the first time I have to deal
> with "backports" infrastructure and I dunno how to interpret those
> messages.

It's just another repository.  It isn't official, yet, but I think there was 
some movement on that.  (It would be nice for backports and volatile to be 
able to use the existing mirror network; I don't know many Debian users that 
can go completely without them.)

The "backports" repository is completely separate from the action "to 
backport" that the security team sometimes does for patches.  "To backport" a 
patch is to take a patch for version X+n of a program and modify it to apply 
to version X of a program.

> So, do you think the package will be available in backports for stable
> release (Lenny) or just indicates the package is being tested for another
> branch (unstable/testing)? :-?

Backports is packages from testing (and rarely unstable) that have been build 
under a stable environment and should be installable without pulling any 
packages from testing/unstable.  They are not part of stable, since the 
upstream version wasn't available or wasn't ready at release time, however 
they should "play nice" with stable.

I've occasionally pulled packages from there, but less so now.  I've been 
following KDE 4.x since 4.2 entered unstable by using a mixed system.  With 
testing/unstable available simply, I don't much use backports.  I did pull 
down pidgin from backports recently though.

As far as iceweasel availability in backports goes, see Sven Hoexter's 
message.
-- 
Boyd Stephen Smith Jr.   ,= ,-_-. =.
b...@iguanasuicide.net  ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/\_/


signature.asc
Description: This is a digitally signed message part.


Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Sven Hoexter
On Fri, Jan 22, 2010 at 09:39:27PM +0100, Sven Joachim wrote:
> On 2010-01-22 21:02 +0100, Camaleón wrote:
> 
> > As Mozilla has stopped the support (no more security patches) for Firefox 
> > releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is 
> > shipped with 3.0.6 (this situation was properly advised on Releases 
> > Notes), I wonder what could be the best way to install the latest Firefox 
> > 64 bits version.
> 
> I'm afraid the answer is "build it from source yourself".  There's no
> official 64-bit tarball (and most likely there won't be any before
> Firefox 4.0), and builds from other distributions will likely require
> newer libraries than available in Lenny.

Alexander Reichle-Schmehl added Iceweasel 3.5 and the complementing
xulrunner release to backports.org a few days ago. So far I can see build
packages for amd64 and ppc.
https://buildd.debian.org/status/package.php?p=iceweasel&suite=lenny-backports

If and when backports of Iceweasel 3.6 will be available depends on when
it will enter testing and if it's possible to build it on lenny.

Sven
-- 
If God passed a mic to me to speak
I'd say stay in bed, world
Sleep in peace
   [The Cardigans - 03:45: No sleep]


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Camaleón
On Fri, 22 Jan 2010 14:17:04 -0600, Boyd Stephen Smith Jr. wrote:

> On Friday 22 January 2010 14:02:13 Camaleón wrote:
>> As Mozilla has stopped the support (no more security patches) for
>> Firefox releases <3.5 (in August 2010, 3.5 will also be dropped), and
>> Lenny is shipped with 3.0.6 (this situation was properly advised on
>> Releases Notes), I wonder what could be the best way to install the
>> latest Firefox 64 bits version.
> 
> From what I understand, the debian-security guys will still backport
> fixes to iceweasel in Lenny as needed until security support is
> terminated for Lenny.
> 
> That's how I get my "firefox".

That was my first thought, too.

And went to backport lists and saw some movement on this:

***
Accepted iceweasel 3.5.6-1~bpo50+1 (source all amd64)
http://lists.backports.org/lurker-bpo/message/20100116.120653.e7d54ae9.en.html
***

But I don't know what does it mean. This is the first time I have to deal 
with "backports" infrastructure and I dunno how to interpret those 
messages.

And there is also what Sven Joachim said, about Lenny policy on Mozilla 
products... and that time has now come. I'm a bit confused.

So, do you think the package will be available in backports for stable 
release (Lenny) or just indicates the package is being tested for another 
branch (unstable/testing)? :-?

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Mark
>On Fri, Jan 22, 2010 at 12:21 PM, Sven Joachim  wrote:

>   >On 2010-01-22 21:17 +0100, Boyd Stephen Smith Jr. wrote:
>>
>> From what I understand, the debian-security guys will still backport
> fixes to
>> iceweasel in Lenny as needed until security support is terminated for
> Lenny.
> >
> >Not really, actually security support for Iceweasel could end rather
> >soon.
> >
> http://www.debian.org/releases/lenny/i386/release-notes/ch-information.en.html#mozilla-security
>

So is epiphany a better bet for safe browing if/when this happens?

Mark


Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Sven Joachim
On 2010-01-22 21:02 +0100, Camaleón wrote:

> As Mozilla has stopped the support (no more security patches) for Firefox 
> releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is 
> shipped with 3.0.6 (this situation was properly advised on Releases 
> Notes), I wonder what could be the best way to install the latest Firefox 
> 64 bits version.

I'm afraid the answer is "build it from source yourself".  There's no
official 64-bit tarball (and most likely there won't be any before
Firefox 4.0), and builds from other distributions will likely require
newer libraries than available in Lenny.

Try "aptitude build-dep xulrunner-1.9 iceweasel" to install the required
development packages.

Sven


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Sven Joachim
On 2010-01-22 21:17 +0100, Boyd Stephen Smith Jr. wrote:

> From what I understand, the debian-security guys will still backport fixes to 
> iceweasel in Lenny as needed until security support is terminated for Lenny.

Not really, actually security support for Iceweasel could end rather
soon.

http://www.debian.org/releases/lenny/i386/release-notes/ch-information.en.html#mozilla-security

Sven


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Boyd Stephen Smith Jr.
On Friday 22 January 2010 14:02:13 Camaleón wrote:
> As Mozilla has stopped the support (no more security patches) for Firefox
> releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is
> shipped with 3.0.6 (this situation was properly advised on Releases
> Notes), I wonder what could be the best way to install the latest Firefox
> 64 bits version.

From what I understand, the debian-security guys will still backport fixes to 
iceweasel in Lenny as needed until security support is terminated for Lenny.

That's how I get my "firefox".
-- 
Boyd Stephen Smith Jr.   ,= ,-_-. =.
b...@iguanasuicide.net  ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/\_/


signature.asc
Description: This is a digitally signed message part.


Recommended method to install Firefox 3.6 in Lenny (64 bits)

2010-01-22 Thread Camaleón
Hello,

As Mozilla has stopped the support (no more security patches) for Firefox 
releases <3.5 (in August 2010, 3.5 will also be dropped), and Lenny is 
shipped with 3.0.6 (this situation was properly advised on Releases 
Notes), I wonder what could be the best way to install the latest Firefox 
64 bits version.

Someone recommended me to perform a download of the package from 
Mozilla's site and just extract the files into a directory and run it 
directly from there, but as all my plugins are also 64 bits version 
(java, flash...) I prefer to install a 64 bits browser.

So I wonder what is the easiest method to get the latest version of 
Firefox (64 bits) without breaking anything :-)

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org