Hi Moritz! On 05/28/2013 10:33 PM, Moritz Muehlenhoff wrote:
we need to change the way security fixes are handled for Mozilla in stable-security. The backporting of security fixes is no longer sustainable resource-wise.
I second this. Having one of the most commonly used desktop applications lacking so much behind the current upstream versions in a newly released Debian version is very frustrating and annoying. Having the current ESR versions of Iceweael and Icedove in Debian stable is the best practice as these releases were just intended to be used in scenarios were Debian stable is deployed.
As such, we'll switch to releasing the ESR releases of iceweasel and icedove in stable-security.
Great! Really looking forward. Let me add to that there is currently no easy way (e.g. without rebuilding the package) to install Icedove ESR on Wheezy. The Debian Mozilla packaging team suggests installing Icedove ESR from unstable [1], but alas this version is linked against libc6 2.17 and will therefore force an update of the libc6 installed on Wheezy which is unacceptable [2]. I therefore urge anyone involved in packaging Icedove to provide a version of Icedove ESR linked against the version of libc6 in Wheezy. Also, if anyone of the GNOME package maintainers is reading this, why does the gnome meta package depend on xul-ext-adblock-plus? This often causes major headache when upgrading either Iceweasel or Icedove in the form that using the wrong upgrade path will result in partial or full removal of GNOME.
In the future the majority of packages should thus rather be installed through http://addons.mozilla.org instead of Debian packages.
I think this is the best approach. Most addons should be installed through the built-in addon manager as this will make keeping addons up-to-date much easier and reduces maintaining efforts. As long as we're going with the latest ESR versions, I assume that most of the most popular addons will work when installed through the official upstream sources. Cheers, Adrian > [1] http://mozilla.debian.net/ > [2] http://paste.debian.net/7192/ -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913 -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/51a53af2.3010...@physik.fu-berlin.de
