Security Updates: firefox-3.6.11 (originally included thunderbird-3.0.9/3.1.5, seamonkey-2.0.9)

[Lars Bamberger]

There are several security fixes in these new versions.

http://www.h-online.com/open/news/item/Mozilla-releases-Firefox-Thunderbird-security-updates-1110898.html

Seamonkey-2.0.9 has yet to be released. Don't know about the required version of xulrunner.

[ken@…]

I can't do seamonkey, and I have no interest in thunderbird. Let's have some separate tickets for those.

#3171 for thunderbird.

and #3172 for seamonkey.

Reducing this ticket to forefox. NB that requires newer sqlite3.

[DJ Lucas]

that requires newer sqlite3

or DB-5.1.19 with sqlite3 compatibility (hopefully).

[ken@…]

Replying to dj@…:

that requires newer sqlite3

or DB-5.1.19 with sqlite3 compatibility (hopefully).

The test is

SQLITE_VERSION=3.7.1
...
if $PKG_CONFIG --exists "sqlite3 >= $SQLITE_VERSION" ; then
            echo "$ac_t""yes" 1>&6
            succeeded=yes

I have no idea if db-5.1.19 will pass that, but if it does I'm (a) slightly worried that it pretends to be what it isn't, and (b) wondering what will happen the next time mozilla decides a newer version is needed.

For now, I'll keep it as sqlite3. When db-5.1.19 or later are in, whoever does that can review this if they wish. At the moment I don't see any tickets for a newer db.

[DJ Lucas]

Nope...won't pass it then. No .pc files are installed by Berkeley db. I'm afraid that db will not be a "drop-in" replacement for sqlite3 without pc files (have to work on that). Also, the version of sqlite3 included with db-5.1.19 is 3.7.0(.1) (API version?). Don't know if Oracle will roll a new DB release for a version bump of sqlite3, but they haven't done so yet. It may be that the db sqlite3 version is not affected by the same bug that forced release of sqlite3-3.7.1. I'll put in a bug for db-5.1.19.

[ken@…]

firefox doen in r8646.

[bdubbs@…]

Milestone renamed