Why no firefox and thunderbird patches?
Hans Werner Strube, strube&physik3*gwdg*de
there have not been any more patches for Firefox and Thunderbird
since 2.0.0.19 (April 3 and May 12, respectively), although there
were many security issues since then. As apparently Firefox and Thunderbird
are specially built for Solaris 10, normal upgrades seem not recommended.
Well, upgrades to 3.x can probably not be expected, but fixes of security
issues should occur. What is Sun's policy here?
--
Hans Werner Strube strube(@)physik3(.)gwdg(.)de
Drittes Physikalisches Institut, Univ. Goettingen
Friedrich-Hund-Platz 1, 37077 Goettingen, Germany
Chris Ridd
> Whereas the old Solaris-10-special Mozilla 1.7 was patched for years,
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
> Well, upgrades to 3.x can probably not be expected, but fixes of security
> issues should occur. What is Sun's policy here?
How are you checking for patches?
I noticed patch 125542-06 came out on 15th December, updating
Thunderbird for x86. (125541-06 for SPARC). I haven't looked for
Firefox patches, but I'm sure they exist too.
--
Chris
phil.go...@bolthole.com
strube&physik3*gwdg*de) wrote:
> Whereas the old Solaris-10-special Mozilla 1.7 was patched for years,
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
>
what is your understanding of the "special" nature of these builds?
I'm curious what is so special about them.
Richard B. Gilbert
Well, the fact that most web browsers were originally written for
Windows might have something to do with it. I don't imagine that
porting the Windows code to Solaris would be an easy task.
I don't think I've ever heard of a port of Internet Explorer to ANY
platform other than X86/PC.
Bill Waddington
Significant of not much:
IE on Mac: http://en.wikipedia.org/wiki/Internet_Explorer_for_Mac
And to pick another nit, IIRC Firefox was cross-platform from the
get-go. It may well be that the first target was windows - I can't
find a citation in a quick search.
Bill
--
William D Waddington
william.w...@beezmo.com
"Even bugs...are unexpected signposts on
the long road of creativity..." - Ken Burtch
ITguy
strube&physik3*gwdg*de) wrote:
> Whereas the old Solaris-10-special Mozilla 1.7 was patched for years,
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
> Well, upgrades to 3.x can probably not be expected, but fixes of security
> issues should occur. What is Sun's policy here?
Not sure what the official policy is, but I've gotten in the habit of
using the packages from OpenSolaris. There are Solaris 10 versions
posted.
http://releases.mozilla.org/pub/mozilla.org/firefox/releases/latest-3.5/contrib/
phil.go...@bolthole.com
> Not sure what the official policy is, but I've gotten in the habit of
> using the packages from OpenSolaris. There are Solaris 10 versions
> posted.http://releases.mozilla.org/pub/mozilla.org/firefox/releases/latest-3...
Well, if you dont have a problem using other than the "bundled"
firefox, you may also be interested to know that firefox 3 is
available from opencsw.org, and not just for opensolaris; binaries
available for solaris 8, 9, and 10.
hume.sp...@bofh.ca
> porting the Windows code to Solaris would be an easy task.
Firefox is a Mozilla product, and has been cross-platform since the
beginning. Linux is one of its flagship platforms, for example. Solaris
is an explicit target platform, even if Mozilla doesn't do the Solaris builds
themselves.
You can fetch the source code directly from mozilla.org and compile it
yourself if so inclined. I was doing so back in the Mozilla 0.60 days.
--
Brandon Hume - hume -> BOFH.Ca, http://WWW.BOFH.Ca/
Mike Marshall
>> I'm curious what is so special about them.
It's kinda hard to compile firefox on solaris, it has a lot of
opensource dependancies, lib_tangopango and a bunch of other
stuff nobody's (well not me <g>) ever heard of...
-Mike
Thad Floryan
> [...]
> I don't think I've ever heard of a port of Internet Explorer to ANY
> platform other than X86/PC.
Au contraire. There was an IE for UNIX (Solaris and HP-UX).
IE version 4.0 was released for Solaris on March 4, 1998. I believe I
still have it on an older SS20/Solaris_7 system in my garage.
More details here:
Nomen Publicus
There was once a sparc version. It sucked worse than you can imagine.
--
"Attack of the Unsinkable Rubber Ducks"
Christopher Brookmyre
Tim Bradshaw
<william.w...@beezmo.com> said:
> And to pick another nit, IIRC Firefox was cross-platform from the
> get-go. It may well be that the first target was windows - I can't
> find a citation in a quick search.
It was certainly cross platform when it was Phoenix
Colin B.
> Whereas the old Solaris-10-special Mozilla 1.7 was patched for years,
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
> Well, upgrades to 3.x can probably not be expected, but fixes of security
> issues should occur. What is Sun's policy here?
No idea about Sun's policy, but I gave up on their web browser stream years
ago. if you go to mozilla.com, it now has an official download of 3.5.6
for SunOS. That download is a zip file, so if (like me) you prefer a pkg
install, you can get that from the FTP site as well.
http://releases.mozilla.org/pub/mozilla.org/firefox/releases/3.5.6/contrib/
Colin.
Hans Werner Strube, strube&physik3*gwdg*de
> On 2009-12-18 15:40:09 +0000, Hans Werner Strube, strube&physik3*gwdg*de said:
>
>> Whereas the old Solaris-10-special Mozilla 1.7 was patched for years,
>> there have not been any more patches for Firefox and Thunderbird
>> since 2.0.0.19 (April 3 and May 12, respectively), although there
>> were many security issues since then. As apparently Firefox and Thunderbird
>> are specially built for Solaris 10, normal upgrades seem not recommended.
>> Well, upgrades to 3.x can probably not be expected, but fixes of security
>> issues should occur. What is Sun's policy here?
>
> How are you checking for patches?
By the semimonthly patch reports and sometimes by SunSolve's patchfinder
or PCA.
> I noticed patch 125542-06 came out on 15th December, updating
> Thunderbird for x86. (125541-06 for SPARC). I haven't looked for
> Firefox patches, but I'm sure they exist too.
Thanks for the hint! The patch report from December 16 did not yet show
125541-06. But there is no new Firefox patch yet.
John D Groenveld
>125541-06. But there is no new Firefox patch yet.
$ ./pca -X . -y -l all | egrep -i 'thunderbird|firefox'
125540 06 = 06 RS- 263 Mozilla 1.7_x86: Mozilla Firefox Web browser
125542 06 = 06 RS- 7 Mozilla 1.7_x86: Mozilla Thunderbird email client
Peter Ryan and company have a track record of treating the web browser
component of the Solaris desktop experience as tabboo.
Are there known vulnerabilities in SUNWfirefox?
Customers also need to talk to Support about SUNWflash-player-plugin.
John
groe...@acm.org
Colin B.
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
> Well, upgrades to 3.x can probably not be expected, but fixes of security
> issues should occur. What is Sun's policy here?
I said earlier that I don't know Sun's policy. Having thought about it
though, I think I can take a stab in the dark.
Sun's de-facto policy is that Solaris 10 is not a desktop operating system.
The desktop GUI (Gnome) is strictly there as a convenience, and should not
be relied on, or used as a desktop alternative to Windows, MacOS, or Linux.
Colin
John D Groenveld
Colin B. <cbi...@somewhereelse.shaw.ca> wrote:
>Sun's de-facto policy is that Solaris 10 is not a desktop operating system.
>The desktop GUI (Gnome) is strictly there as a convenience, and should not
>be relied on, or used as a desktop alternative to Windows, MacOS, or Linux.
Its no wonder that Scott McNealy and company is selling out at a fire sale
price when Peter Ryan and company's support army does such a bang-up job
supporting the desktop functionality of Sun Ray server systems that
Peter Ryan company's sales critters army are hawking.
John
groe...@acm.org
Colin B.
> there have not been any more patches for Firefox and Thunderbird
> since 2.0.0.19 (April 3 and May 12, respectively), although there
> were many security issues since then. As apparently Firefox and Thunderbird
> are specially built for Solaris 10, normal upgrades seem not recommended.
> Well, upgrades to 3.x can probably not be expected, but fixes of security
> issues should occur. What is Sun's policy here?
I said earlier that I don't know Sun's policy. Having thought about it
though, I think I can take a stab in the dark.
Sun's de-facto policy is that Solaris 10 is not a desktop operating system.
The desktop GUI (Gnome) is strictly there as a convenience, and should not
be relied on, or used as a desktop alternative to Windows, MacOS, or Linux.
Colin
