From owner-freebsd-gecko@FreeBSD.ORG Thu Mar 22 17:07:53 2012 Return-Path: Delivered-To: gecko@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9C2BE106566B; Thu, 22 Mar 2012 17:07:53 +0000 (UTC) (envelope-from flo@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 6B35D8FC0C; Thu, 22 Mar 2012 17:07:53 +0000 (UTC) Received: from bender.solomo.local (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q2MH7pV4089402; Thu, 22 Mar 2012 17:07:52 GMT (envelope-from flo@freebsd.org) Message-ID: <4F6B5C67.1040009@freebsd.org> Date: Thu, 22 Mar 2012 18:07:51 +0100 From: Florian Smeets User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:10.0.3) Gecko/20120315 Thunderbird/10.0.3 MIME-Version: 1.0 To: Beat Gaetzi References: <20120316094753.GA73354@mech-cluster241.men.bris.ac.uk> In-Reply-To: X-Enigmail-Version: 1.4 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: gecko@freebsd.org, Anton Shterenlikht Subject: Re: a plea: please don't deprecate FF 3.6 yet X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2012 17:07:53 -0000 On 16.03.2012 11:13, Beat Gaetzi wrote: > 2012/3/16 Anton Shterenlikht : >> I'm on ia64, and www/firefox doesn't build. >> www/firefox36 is about the only full featured >> browser that does build on ia64. > > As far as I know not only ia64 is affected by the deprecation > of Firefox 3.6. I know that PowerPC is no longer supported > in newer versions of Firefox. I don't know the current status > of Firefox on sparc64 but I assume that it currenty doesn't > build. > >> I've several open bug reports with mozilla: >> >> https://bugzilla.mozilla.org/show_bug.cgi?id=638056 >> https://bugzilla.mozilla.org/show_bug.cgi?id=647830 >> https://bugzilla.mozilla.org/show_bug.cgi?id=683879 >> https://bugzilla.mozilla.org/show_bug.cgi?id=729447 > > Thanks, for opening these bugreports! > >> I understand it's a pain to keep obsolete >> software in ports, and I'm trying to find >> a newer alternative. However, with the current >> pace of version numbers in mozilla project, FF12 >> might be coming out tomorrow, and I'm not ready >> to migrate from 3.6 yet. > > Firefox 3.6 will be end-of-life on April 24th. My intention was > to remove it with the relase of Firefox 12 as at that point > upstream no longer provides security updates and I like to > avoid having vulnerable software in the portstree which is > no longer maintained (yes, we also have to update libxul as > the current version is based on Firefox 3.6...). > > Flo, whats your opinion on this? > I agree that we should remove firefox36 as soon as the first vulnerability is announced that Mozilla won't fix. Currently Beat and I can barely keep up with keeping all the gecko ports up to date. We have very little time to fix/improve things already, so we are not in a position to start applying security fixes to deprecated ports. We should concentrate on making www/firefox-esr (once it's in the tree) work on as many platforms as possible. Florian