In <news:[email protected]>,
Kyle Terrien <[email protected]> wrote:

> Amanda Sheppard wrote:
> > Could someone confirm that, for security reasons, the graphite font
> > rendering library has been removed from Seamonkey 2.40?
> > 
> > If not, how do I remove it?
> > 
> > Thanks in advance.  
> 
> I think graphite is still in there.  There is an about:config entry.
> 
> It's easy to disable.  In about:config, set
> gfx.font_rendering.graphite.enabled to false.

That's all correct.  Mozilla decided to leave graphite in but disable
it (in Firefox 45.0.1) by setting that pref to false by default.
According to the upstream graphite people, the issues are fixed and
should make it into Mozilla stuff soon.¹  Apparently, Mozilla thought
this stuff was fixed as of Fx 45.0² but then changed their minds.
ISTM all SeaMonkey users should turn it off at least until Mozilla are
sure it's fixed. 

1 
http://scripts.sil.org/cms/scripts/page.php?site_id=projects&item_id=graphite_firefox

2 https://www.mozilla.org/security/advisories/mfsa2016-37/ and 
  https://www.mozilla.org/security/advisories/mfsa2016-38/


_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to