NoOp wrote:
On 12/2/2016 2:30 PM, NFN Smith wrote:
I'm watching discussions relating to the SVG exploit, and am a little
  confused about what steps I should take.



- Use one of Adrian Kalla's unofficial builds? If so, which build,
and what potential problems are there?

Yes, 2.47
<https://l10n.mozilla-community.org/~akalla/unofficial/seamonkey/nightly/>
- latest-comm-release-<your flavor
No inherant problems that I can think of. I would advise downloading the
lightning and gdata-provider xpi's just in case you run into any issues
with calendar. And of course backup your profile before upgrading.

I think that's the route that I'll take. I do make a lot of use of extensions, but some are higher priority than others. I'll see what comes up, and for ones that don't work, I'll simply accept the annoyance.



- Something else?


Our organization uses mostly Firefox and Thunderbird, as preferred
clients. (I'm actually one of only a couple that use Seamonkey).

I HIGHLY recommend removing 2.40 from ALL work networks.
https://blog.mozilla.org/security/category/security/
https://www.mozilla.org/en-US/security/known-vulnerabilities/seamonkey/
o now compare to everything fixed in Firefox and Thunderbird since 2.40
was released:
<https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/>
<https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/>

Yes, that's definitely a concern, with fixes that have been done to FF and TB, since the release of 2.40.

We have a fairly aggressive policy stance about requiring our users to
apply security updates promptly. I know that the last time there was
a break in Seamonkey development, one of our admins was questioning
me about whether Seamonkey is still supported -- at that time, I was
running the most current version, but it was already behind Firefox
development, and the current gap between releases is even larger. For
me, a temporary move from Seamonkey to Firefox isn't a huge thing,
but having to relocate my mail to Thunderbird is more painful, as I
still do nearly everything through POP.

Thunderbird handles POP just fine. You can run SeaMonkey and Thunderbird
side-by-side to check/test, Just load up Thunderbird

It's not as simple as that. I have plenty of history of using Thunderbird in POP, and I know the capacities. However, I also have a lot of data that doesn't easily move from SM to TB -- that includes 15+ years' of mail archives across multiple accounts, contact lists, and a lot rules handling, in conjunction with a fairly elaborate folder structure. Plus, several news servers, and RSS feeds, as well.

For what it's worth, several months ago, I did a rebuild of my Seamonkey profile, to clean up a lot of years of accumulated cruft. The browser side went fairly quickly, but it took me the better part of a day, in moving all my mail data, and making sure that I didn't disrupt things.

I don't see it useful to move/copy my mail to Thunderbird for something that's temporary (but extended), unless I'm planning to make Thunderbird my primary mail client, as a permanent thing. I really don't want to have to go through the exercise of moving everything back, sometime later.

Thus, in this context, it looks like going with the 2.47 build is the preferable approach.

And as turns up frequently in these kinds of discussions, I definitely want to make sure I have my profile backed up, before making significant changes.

Smith

_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to