Hi. On Fri, Oct 19, 2018 at 08:58:07AM +0200, Dominik George wrote: > >> > [1] https://github.com/jasperla/openbsd-wip/issues/86 > > Seriously? They forbid linking against libraries if their code is not shipped > with their sources? > > That also seems like a security nightmare in the making. > > Mozilla themselves weren't even *that* ridiculous, were they?
Ridiculous or not, but stable's firefox-esr contains their own private version of NSS - [1]. Same for the thunderbird. But they try to keep it sane, so at least firefox does not embed 'correct' version of GTK3, for example. [1] https://packages.debian.org/search?searchon=contents&keywords=libsoftokn3.so&mode=exactfilename&suite=stable&arch=any Reco
