From owner-freebsd-gecko@freebsd.org Sat Mar 28 01:58:03 2020 Return-Path: Delivered-To: freebsd-gecko@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C80D626B4F0 for ; Sat, 28 Mar 2020 01:58:01 +0000 (UTC) (envelope-from mi+t@aldan.algebra.com) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 48q21G0Br3z4PGY for ; Sat, 28 Mar 2020 01:57:53 +0000 (UTC) (envelope-from mi+t@aldan.algebra.com) Received: by mailman.nyi.freebsd.org (Postfix) id 4D70426B4EC; Sat, 28 Mar 2020 01:57:45 +0000 (UTC) Delivered-To: gecko@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3281426B4EB for ; Sat, 28 Mar 2020 01:57:45 +0000 (UTC) (envelope-from mi+t@aldan.algebra.com) Received: from symbion.zaytman.com (symbion.zaytman.com [64.112.176.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "symbion", Issuer "Narawntapu" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 48q20r12rHz4P9J; Sat, 28 Mar 2020 01:57:31 +0000 (UTC) (envelope-from mi+t@aldan.algebra.com) Received: from narawntapu.narawntapu (pool-100-1-228-105.nwrknj.fios.verizon.net [100.1.228.105]) by symbion.zaytman.com (8.15.2/8.15.2) with ESMTPS id 02S1vLK5001625 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 27 Mar 2020 21:57:21 -0400 (EDT) (envelope-from mi+t@aldan.algebra.com) X-Authentication-Warning: symbion.zaytman.com: Host pool-100-1-228-105.nwrknj.fios.verizon.net [100.1.228.105] claimed to be narawntapu.narawntapu Received: from aldan.narawntapu (aldan [192.168.3.13]) by narawntapu.narawntapu (8.15.2/8.15.2) with ESMTP id 02S1vJ9u067333; Fri, 27 Mar 2020 21:57:19 -0400 (EDT) (envelope-from mi+t@aldan.algebra.com) X-Authentication-Warning: narawntapu.narawntapu: Host aldan [192.168.3.13] claimed to be aldan.narawntapu Subject: Re: Restoring seamonkey To: Jan Beich Cc: gecko@freebsd.org References: <857ef528-1dfd-12b6-6579-b03a137ff199@aldan.algebra.com> From: "Mikhail T." Message-ID: <9a797087-e769-3c50-3032-c71b41fab823@aldan.algebra.com> Date: Fri, 27 Mar 2020 21:57:19 -0400 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-DCC-x.dcc-servers-Metrics: narawntapu 104; bulk rep Body=2 Fuz1=2 Fuz2=2 rep=68% X-Spam-Status: No, score=-0.9 required=23.0 tests=ALL_TRUSTED,BAYES_00, HTML_MESSAGE,RATWR8_MESSID autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on narawntapu.narawntapu X-Rspamd-Queue-Id: 48q20r12rHz4P9J X-Spamd-Bar: +++ Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of mi@aldan.algebra.com has no SPF policy when checking 64.112.176.10) smtp.mailfrom=mi@aldan.algebra.com X-Spamd-Result: default: False [3.77 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-0.01)[country: US(-0.05)]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; HAS_XAW(0.00)[]; DMARC_NA(0.00)[algebra.com]; AUTH_NA(1.00)[]; URI_COUNT_ODD(1.00)[3]; RCVD_COUNT_THREE(0.00)[3]; RCVD_TLS_LAST(0.00)[]; NEURAL_SPAM_MEDIUM(0.93)[0.933,0]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_SPAM_LONG(0.95)[0.945,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:394548, ipnet:64.112.176.0/24, country:US]; TAGGED_FROM(0.00)[t]; MID_RHS_MATCH_FROM(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[105.228.1.100.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.10] Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Mar 2020 01:58:03 -0000 On 27.03.20 21:15, Jan Beich wrote: > Good luck: > - 2.53.1 is still vulnerable > - Upstream has unstable release cadence > - ESR60 engine may not build with new dependencies > - Expecting someone else to do the work > What, I wonder, made you think, I am expecting someone else to do the work? My question was quite agnostic of /who/ would do it, just /whether /it can/should be done... If the fresh (February) release is still vulnerable, then, perhaps, it should stay buried... Can you give example of a still-open CVE? I'm staring at the list here , but can't see, what's still open... > I'm only opposed on using Mk/bsd.gecko.mk and having gecko@ as the maintainer. I understand the latter, but not the former. As long as gecko@ are not responsible for it, what's wrong with still using bsd.gecko.mk? That said, if we're sticking to firefox and thunderbird /only/, maybe the two can be modified to share more components -- libxul.so in particular, but also others?.. At least then, running both on the same machine will still share the shared libraries saving RAM... Thanks! Yours, -mi