On 12/16/2013 06:26 PM, Mike Hommey wrote: > NSS in debian is more than iceweasel. Newer Iceweasel can't use older > NSS.
I'm aware of this.
> And newer NSS can break other software.
I understand that this is a possibility, but i don't know of any examples.
> IOW, I'm not going to change this for the official backports. You can
> however backport nss independently and use dpkg-divert to "remove" the
> nss copy from the xulrunner directory.
i'm doing this; a removal isn't sufficient, though, since the backported
iceweasel only looks in /usr/lib/xulrunner-26.0/libnssckbi.so, and
doesn't automatically find /usr/lib/$triplet/nss/libnssckbi.so -- so a
symlink appears to be necessary as well.
> There are two problems with cairo. The first is that its maintainer(s)
> are apparently not interested in fixing these issues. There are bugs
> with patches against cairo that have been waiting for years.
:( That is definitely a problem.
> The second
> problem is that the in-tree version of cairo is now older than the system
> version, which now likely makes things harder. Also note that those
> issues have, for most of them, never surfaced on anything else than
> iceweasel.
>
> With that being said, cairo is on its way out of iceweasel, it will go
> away during 2014, well before jessie is released.
hm, ok, that is one upside here, i guess.
--dkg
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Secure-testing-team mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-team
