[gentoo-dev] Lastrite: net-libs/xulrunner

[gentoo-dev] Lastrite: net-libs/xulrunner

[Samuli Suominen]

# Samuli Suominen <ssuominen@gentoo.org> (06 Jun 2012)
# Vulnerable and no longer used by anything in tree wrt #403415
# Removal in 30 days
<net-libs/xulrunner-10.0
<gnome-extra/yelp-2.30.2-r200

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Ulrich Mueller]

>>>>> On Wed, 06 Jun 2012, Samuli Suominen wrote:

> # Samuli Suominen <ssuominen@gentoo.org> (06 Jun 2012)
> # Vulnerable and no longer used by anything in tree wrt #403415
> # Removal in 30 days
> <net-libs/xulrunner-10.0

Why a version dependent mask? There's nothing >2.0.1-r1 in the tree.

Ulrich

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Samuli Suominen]

On 06/06/2012 05:07 PM, Ulrich Mueller wrote:
>>>>>> On Wed, 06 Jun 2012, Samuli Suominen wrote:
>
>> # Samuli Suominen<ssuominen@gentoo.org>  (06 Jun 2012)
>> # Vulnerable and no longer used by anything in tree wrt #403415
>> # Removal in 30 days
>> <net-libs/xulrunner-10.0
>
> Why a version dependent mask? There's nothing>2.0.1-r1 in the tree.
>
> Ulrich
>

I've seen overlays with >=net-libs/xulrunner-10.0 snatched from the 
firefox tarball.
So just trying to be polite towards people doing so...

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Ian Stakenvicius]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 06/06/12 10:07 AM, Ulrich Mueller wrote:
>>>>>> On Wed, 06 Jun 2012, Samuli Suominen wrote:
> 
>> # Samuli Suominen <ssuominen@gentoo.org> (06 Jun 2012) #
>> Vulnerable and no longer used by anything in tree wrt #403415 #
>> Removal in 30 days <net-libs/xulrunner-10.0
> 
> Why a version dependent mask? There's nothing >2.0.1-r1 in the
> tree.
> 
> Ulrich
> 

Other distros are distributing xulrunner-10, I expect the mask is
there because gentoo might do so as well soon, if/when the need arises.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iF4EAREIAAYFAk/PaGIACgkQ2ugaI38ACPD4NgEAqa4brrpI8MIwZZn5b/Z9HEU2
FpUTwn8cVQAs8kbZKd8A/ityigdTOoYv76fslXOV0KtLN+8sJRc7kcmixjSJoyzb
=atcw
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Robin H. Johnson]

On Wed, Jun 06, 2012 at 04:19:58PM +0300, Samuli Suominen wrote:
> # Samuli Suominen <ssuominen@gentoo.org> (06 Jun 2012)
> # Vulnerable and no longer used by anything in tree wrt #403415
> # Removal in 30 days
> <net-libs/xulrunner-10.0
> <gnome-extra/yelp-2.30.2-r200
What do we do about other apps that are XULRunner based, and NOT yet
updated by upstream to the new xulrunner (it actually depends on remote
XUL loading that got removed in newer versions too).
(In my case, http://open-ils.org/)

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Samuli Suominen]

On 06/06/2012 08:28 PM, Robin H. Johnson wrote:
> On Wed, Jun 06, 2012 at 04:19:58PM +0300, Samuli Suominen wrote:
>> # Samuli Suominen<ssuominen@gentoo.org>  (06 Jun 2012)
>> # Vulnerable and no longer used by anything in tree wrt #403415
>> # Removal in 30 days
>> <net-libs/xulrunner-10.0
>> <gnome-extra/yelp-2.30.2-r200
> What do we do about other apps that are XULRunner based, and NOT yet
> updated by upstream to the new xulrunner (it actually depends on remote
> XUL loading that got removed in newer versions too).
> (In my case, http://open-ils.org/)
>

we don't do anything, but you can keep on using it by copying the ebuild 
to your local overlay (don't forget distfiles)


then when they do upgrade to new xulrunner, it's possible to package it 
from firefox tarball
mozilla upstream doesn't support this, but some other distribs are 
packaging it[1]

[1] http://www.archlinux.org/packages/extra/x86_64/xulrunner/

but nothing in portage is requiring this, so -1 for packaging it from 
me, as they should really upgrade to something else, like webkit-gtk...

Re: [gentoo-dev] Lastrite: net-libs/xulrunner

[Robin H. Johnson]

On Wed, Jun 06, 2012 at 09:50:01PM +0300, Samuli Suominen wrote:
> then when they do upgrade to new xulrunner, it's possible to package it 
> from firefox tarball
> mozilla upstream doesn't support this, but some other distribs are 
> packaging it[1]
> 
> [1] http://www.archlinux.org/packages/extra/x86_64/xulrunner/
> 
> but nothing in portage is requiring this, so -1 for packaging it from 
> me, as they should really upgrade to something else, like webkit-gtk...
Can you run an app that relies on remotely served XUL under WebKit, on
Windows, OSX, Linux with that?

If so, I'll suggest it to upstream.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85