From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E57411382C5 for ; Sun, 1 Apr 2018 23:22:30 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8FE0DE0AA6; Sun, 1 Apr 2018 23:22:23 +0000 (UTC) Received: from mail-yw0-x235.google.com (mail-yw0-x235.google.com [IPv6:2607:f8b0:4002:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 098ECE09DB for ; Sun, 1 Apr 2018 23:22:22 +0000 (UTC) Received: by mail-yw0-x235.google.com with SMTP id y23so4514006ywy.4 for ; Sun, 01 Apr 2018 16:22:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=xTUv+F6sujkm5xIgzhLZF1b4OKDwjdf4ogC00OqyHB0=; b=bfjxJt7/dAaQNSVutkes37j4ft4/Xwhexhuvqyq8X1xgHyoW1K/SsS8T3f9pu7AmsT Lm/kksOmaasLpz+LviWZyCRFONGMAXaoCjMsf+FS/ReGH5zZeNjZsqGaywap4yC1qCf1 4p3Xexmi2tGMcAVnSfRpaeX58tCy8GNDrM2odmf4Q/0AUqUaWszcXR6wD/sygChRI5as TLJGzVy3tbWZTpf6Rk+gD4E+sLmL422B9Z2jJ++WOlZajk+xKPIkJ8IpmpChnxUA6cj4 MvkNqbHgS0oV5K5Nx3hv4RCzlHDD9FLIVU6xmBnyil4xXOzBS4NovRxMdZkbNad9Np6l Z8Mg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=xTUv+F6sujkm5xIgzhLZF1b4OKDwjdf4ogC00OqyHB0=; b=FV2oq5Q1AA8x1WRV1A6sbXLSHqcV3CWPReKR/BYXpM9jvgXfL2i9KaS143XVsAsvhG Bxz4C4HSBWofzkgZImksMyjuOM1aWIq0qIkI+3ZkuFpSig9N7O9qxLlpcyenxN+bdJ4T wkyEh8JJi73qYpwx3pOHUj8rHpZk6IAN4APjTVlOOkROjUz1w+IzzpKhpbFueyzN8z86 XQgUbdBGgYFzy3BHL7Z7G9PXWb2BRtf0hviTY/hn48avc+miBsNgQTH63xEJq1V0KqoA cv6e0PejM6elmaP5dmBsrErn/bizSDU1p7N+UZz00xon6C50b+XF9JkYFDJh0TfH8oJ4 M5bw== X-Gm-Message-State: AElRT7HHPZbET00Qwd4YicCJuTm8yPIoidq51sOKI1hM6UAQatYbzsyc 57K3CZFx3QDGnlle6jcG0lI= X-Google-Smtp-Source: AIpwx4/VPPFJRYNx1+nUudzsxtcgirRiqEpWkaZwanILLzCKVUGVnXnq6uAghGB67apzjTJ34wYwAA== X-Received: by 10.129.175.79 with SMTP id x15mr4223480ywj.35.1522624941887; Sun, 01 Apr 2018 16:22:21 -0700 (PDT) Received: from [192.168.2.5] (adsl-65-0-93-225.jan.bellsouth.net. [65.0.93.225]) by smtp.gmail.com with ESMTPSA id 19sm4668895ywd.28.2018.04.01.16.22.20 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 01 Apr 2018 16:22:21 -0700 (PDT) Subject: Re: [gentoo-user] Re: Firefox and addons no longer supported question To: gentoo-user@lists.gentoo.org References: <3f62fbf9-c160-60e4-e5dc-07cecf213439@gmail.com> <20180331173626.nmq7jbqi2r2sxuwc@matica.foolinux.mooo.com> <20180401143550.ia5mmamo5f44aysn@matica.foolinux.mooo.com> <20180401222629.lrhfnu5juhxcocda@matica.foolinux.mooo.com> From: Dale Openpgp: preference=signencrypt Autocrypt: addr=rdalek1967@gmail.com; keydata= xsFNBFpEtdQBEADI51WaryP3FJlDfmCQx2aPQpSppEKxqWhCTA8KFEcOVFmIIfiFAeekqMMD mhUxgZTtlQh7dsNqha6ioaYDqGKTv7oeJlPJw4hmIMJX3WYVSOHlsJUNM2jpDIAFeEKfup/T zDzFpuU2Qtr/Y0ji35wHyOAZLRckeNk705oRvE9wqi6noTP15Gxmw/U6aMzEfvu+wGEfCjgs 9bERmu+CS75PZEaFAv8RnsXUv1UcvQ45jmk/8ni/ogxE2h53OIp6c/hOlgJkSVRQWPZZyKZw lDiSUKCtMXPMdZ9w0X6RltQxtIQXO0KxAKaAp+tnL8z+0piafF5uW4RIglhT922RXKxxdZyx SjRgtE4V1IPtUcwPAeqVUZw2P1b4pjfPv7tNtMoFsIiY0ZnT+ua4ps6KOUeocRPKAX14mZkL jt/sZM7aIKiwyoteshRgWNNkxh4OiSxGCRUKNQI8M42cRSidvJZ6SGZXM3WpV28RPyF7+0Ba 0stEQwBGNF8uxgytY9rOJ7obmIpEZKx1p3W1O1hadOjBo2110jMDirRXtktMDfBDvVKkOZ06 vLu16uZLb0O52euhl2dMcEI3ZoCAFTKtdwMITIDj1TcMBZar6+bcwOicSFFogOLHQLJZRO5q I5szOIYW7+c0yNqPRLT3Sq7HzDyuyTUjmPZSAcqOwzX8GwUFkwARAQABzRtEYWxlIDxyZGFs ZWsxOTY3QGdtYWlsLmNvbT7CwZQEEwEIAD4WIQSUDVlCt0m0Z/PsCaxgB5lCagHqugUCWkS1 1AIbIwUJCWYBgAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBgB5lCagHqurR7D/45/q20 vXdrJGxrkNphotmlBtTpNbVauu5A2NDv3E1Il6yqRBfh4Xw7xFuwhz9DqThuvByU6566vr0z 7oVCK33dxRm4WA7YaogRQZy4VVIbHdrksnh2f702CFllqtn5Y29M2JtXG5jiiL3aZNEhoyP9 eMtzLPGs56yZ3eMkz4U7DEmWCAUr8bbuXW+eq/A0V5djcFdHfmanuDZSxzg+cZTpVOLolS2b pmNsPTSMkJ2MDY2Kfdg3gPhSaawo2agQfgnf9E7vSm7z/rlk8bBUWcPAP/XTN9ndVwOO3x74 EQv/M4EiCTtNpw3yapVZI2NhA1wqW648D7RxIPD8Y3nkJVDS4x5g54xDe1IUFOtVUSDAh+vY wUJt7vgbCeRjyT8XbuGW9RokIos3ALNaPoq/FDNEqefbmop0CPRih6aLFHWT4YBA6xQjLJuP LSNvalNqE5mef0giCtnLxo/lkjnP9Sv+t/5VSHda5zkVuN0+2w46SbGvXIHRkSoSi6XH3ccq KayJC+oTqo4xf9J30c7CV4rEcYnJcnxMw0vcYmU3DwjGfKxuKcLHgPr9mDNWvhteroA5wNWw NzQ72yAj7rsZVUXCxZgiPldSH3SXZJ/Jo6E9JouzQgRb/I4Vy4jx0Yw8rJLDx/ha82fn+FVe cFbiodVV5UD0inw488IAAtJE+Zi0t87BTQRaRLXUARAA38iHcF7M7GnkS73dazdLBgz2YJsu fpix/N/x4CvoHMqTuwi4ASz1WroYjl3KajeH0DSybyPdEQ7nffxIUt48deT3j/rwsJkPRvCF BpmcwxErd/Mbq0BgikYxXvO68aEAs4jBDR26YtONfjobEfd+Juhxci9UN9vTOCgSPhY+dxHs MZ0gHRzvMnpM3o3+oht/XRZr05RQx83DvTIqWnjDQlCseYYlbFp+rFTZi7ro71ULDThfCE0p +f+IQ3zX0cRKOcJGtNRvyWH6PxmN4td6Q7gPHfAsFPLsCpg7nZwOejtAktPejtSEXlN6QOKv bmRQxNtzgMtjzJNNJW2NtBz0DIW394+9stchQRKLqH8n8GnB6tlkfPg4vgf/kq14QQSZcb0F M36wk+i1Hk+TWYWbOBoUw9+X941Pw1JnglJ3tzpBh+36+pdG02Lbm2v6SaZ69zkDfzJ2Sfhb E+KQLibLkiCOhuSDLDWUgUeb0lJ/0qlo3vcQMTBuG5eiWiwBkp4C+ACb1f1Akq0mFvim+gCJ qJOTu0IDK9DjKLKglA3Z6sbeepnXq8fxB2Mo/SFSYEsGqUu4MLxgwnPg7zi+rKg7MhqdiBBE fqugmNguCEYZjJrGCCzwuqPXAZAcyzEYTGFKwI6NdEZ6v8Xc3om9MJomB3y1uzG6K7T9ue5H aw/2aqEAEQEAAcLBfAQYAQgAJhYhBJQNWUK3SbRn8+wJrGAHmUJqAeq6BQJaRLXUAhsMBQkJ ZgGAAAoJEGAHmUJqAeq6/ykP/ib6xEHednaXvzZvvj854PB5ffBqKkphbf51g6pxPvFBWMwY E7Bu/kq8e3hkp3rzX42BjqiUmfEe2OyfZCabXLybP8i/QRkHTzD5nLoIYLeL+62N/WQFW1NU VhqdfQbMhphNgP1mvG2Ib5R6S+Fb+vkw776oq6jLwUBP/o6PPpp62GyvFvFb9ekxV9+sE4yG V3DTqURBY+aXfc/MTzlCXp4u4QzFW9odfcb/kb9f1m/gZbWGihAqeMd1HViXQoMzTx6IuP13 eQAkKj4FlA2QMzbEOOKO6fliSt1JweJoh0OLCEAM/3q+LaflMvvjhl9ht00IUT/ySj3/dZdf EdTpuUAtnC3A3flwgK/aetkkOhrkx9hx4SKn6UHtAl+eCqP1Mae+nWzkisBL0/hBPEz713md 5I+4Y4QjIokRiz/5l/TFwpGu26zmDfDUkZmxZR/iNCW0VAmZE2YdyRm3PYcFcVXuZ1f/ff0D us9xGsO8V6F5EIwx/9Y6AWQdW7PoKHA21ri93PoRgjv+QoOifXEkhJwTKg5k5b1Tr7h9eRU/ Se2XigPVODjrN9FRfkx/JxlJcCs/igGJS05BmiZNIIRDKBGdXy/Fj5HQB2q5v5DfvrLMNTwK Aa8pn/em1SKC/l9aV9ygpN+cQPKoQjGxPPaId/rwX+GVxKl2vakjHLPLQmm3 Message-ID: Date: Sun, 1 Apr 2018 18:22:20 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.7.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20180401222629.lrhfnu5juhxcocda@matica.foolinux.mooo.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Archives-Salt: 50dca84e-2876-4d80-84cd-2a850d2824a0 X-Archives-Hash: 353dfd35fdb202279f581905a403e4ac Ian Zimmerman wrote: > On 2018-04-01 16:29, Martin Vaeth wrote: > >> An alarm sign for me was that palemoon was eventually dropped for >> android after being practically unmaintained (i.e. with known open >> security holes) for months/years. A similar alarm sign concerning >> linux is that they were not able to pull the fixes for the assembler >> code which relied on undocumented behaviour of <=gcc-5, even months >> after gcc-7 was out. Even if these problems are not marked as >> "security" issues, they can easily be some. > WTH is even assembly code _doing_ in a browser?? That is insane. > > now that I know this is the reason why palemoon needs gcc 4, I will > definitely look into it more closely. > > Just for giggles, I tried to re-emerge palemoon.  This is part of the output I got. >>> Running pre-merge checks for www-client/palemoon-27.8.3  * Checking for at least 7 GiB disk space at "/var/tmp/portage/www-client/palemoon-27.8.3/temp" ...                                                                                   [ ok ]  * Checking compiler profile...  * Building Pale Moon with a compiler other than a supported gcc version  * may result in an unstable build.  * You can use gcc-config to change your compiler profile, just remember  * to change it back afterwards.  * You need to have the appropriate versions of gcc installed for them  * to be shown in gcc-config.  * Alternatively, you can set the PALEMOON_ENABLE_UNSUPPORTED_COMPILERS  * environment variable to 1 either by exporting it from the current shell  * or by adding it to your make.conf file.  * Be aware though that building Pale Moon with an unsupported compiler  * means that the official support channels may refuse to offer any  * kind of help in case the build fails or the browser behaves incorrectly.  * Supported GCC versions: 4.7, 4.9  * Selected GCC version: 6.4  * ERROR: www-client/palemoon-27.8.3::palemoon failed (pretend phase):  *   (no error message)  *  * Call stack:  *           ebuild.sh, line 124:  Called pkg_pretend  *           ebuild.sh, line 357:  Called palemoon-4_pkg_pretend  *   palemoon-4.eclass, line  22:  Called die  * The specific snippet of code:  *                      die  *  * If you need support, post the output of `emerge --info '=www-client/palemoon-27.8.3::palemoon'`,  * the complete build log and the output of `emerge -pqv '=www-client/palemoon-27.8.3::palemoon'`.  * The complete build log is located at '/var/log/portage/www-client:palemoon-27.8.3:20180401-230351.log'.  * For convenience, a symlink to the build log is located at '/var/tmp/portage/www-client/palemoon-27.8.3/temp/build.log'.  * The ebuild environment file is located at '/var/tmp/portage/www-client/palemoon-27.8.3/temp/die.env'.  * Working directory: '/var/tmp/portage/www-client/palemoon-27.8.3/homedir'  * S: '/var/tmp/portage/www-client/palemoon-27.8.3/work/palemoon-27.8.3' That is from the overlay palemoon and the latest version of it.  So, it still depends on a old version of gcc which considering the age of it, is sort of odd.  Why has that not been updated?  Is it updatable or is it going to require some serious time consuming effort to do so and there are not enough people to do it?  The overlay I might add, has the latest version of Palemoon according to the website.  It's not the overlay that is running behind, it's palemoon itself.  I admit, I wish things didn't have to update so often at times BUT for some things, it just has to be that way.  I don't worry about security issues with something like Kwrite or Okular but I do worry about it with things like web browsers that I use to make purchases or check on financial websites such as banks etc.  I want those to be secure as possible even if it means updating each week.  This is interesting.  Others who use palemoon may at least want to be aware of it.  Dale :-)  :-)