Re: [Bug-gnuzilla] IceCat and security updates

2019-05-06 Thread Gary
q.v. https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/-- http://gnuzilla.gnu.org

Re: [Bug-gnuzilla] IceCat and security updates

2019-05-05 Thread Mark H Weaver
Mart Rootamm writes: > As and when Mozilla releases 60.6.2 or 60.7.0, there quickly needs to > be a new build because of an upstream brouhaha involving the expiry of > an intermediate signing certificate that disabled all extensions. > > To mitigate the issue, existing users can set > >

Re: [Bug-gnuzilla] IceCat and security updates

2019-05-05 Thread Mart Rootamm
As and when Mozilla releases 60.6.2 or 60.7.0, there quickly needs to be a new build because of an upstream brouhaha involving the expiry of an intermediate signing certificate that disabled all extensions. To mitigate the issue, existing users can set xpinstall.signatures.required to false in

Re: [Bug-gnuzilla] IceCat and security updates

2019-05-03 Thread Mike Gerwitz
On Fri, May 03, 2019 at 15:48:34 -0400, Mark H Weaver wrote: >> Is there any reason why IceCat is skipping updates? > > It's due to lack of developer resources. I talked to Rubén (the current maintainer) at LibrePlanet and he doesn't have the time, and would appreciate any help that anyone can

Re: [Bug-gnuzilla] IceCat and security updates

2019-05-03 Thread Mark H Weaver
writes: > Currently, the last version of IceCat is 60.3.0 while the last version > of Firefox ESR is 60.6.1. Doesn't that make IceCat exposed to security > vulnerabilities > (https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/) > already fixed on Firefox? You're right, and

[Bug-gnuzilla] IceCat and security updates

2019-05-01 Thread andret
Currently, the last version of IceCat is 60.3.0 while the last version of Firefox ESR is 60.6.1. Doesn't  that make IceCat exposed to security vulnerabilities (https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/