OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Mozilla bugfix/security updates (ffx 3.5.12, 3.6.9, sm 2.0.7, xl 1.9.2.9)

From: Landry Breuil (landryrhaalovely.net)
Date: Thu Sep 09 2010 - 02:20:02 CDT


On Wed, Sep 08, 2010 at 11:30:27PM +0200, Landry Breuil wrote:
> hi,
>
> here are the usual mozilla bugfix/security updates, fixing a bunch of
> "usual" MFSA..
> https://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.9
>
> diffs currently building on my amd64 box, please test (as i know you use 'em),
> esp. on non-mainstream archs.
>
> Landry

New diff for ffx 3.6.9, the upstream (morons!) now enforce sqlite3 to
be built with SQLITE_SECURE_DELETE, so it fails with our current sqlite
port, as pointed out by Dave Del Debbio.

References for more bikeshedding :
https://bugzilla.mozilla.org/show_bug.cgi?id=445164
https://bugzilla.mozilla.org/show_bug.cgi?id=546162
https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/457791
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555955
http://bugs.gentoo.org/show_bug.cgi?id=304913

https://developer.mozilla.org/en/Storage/Performance might be
interesting for the ones that complain that firefox* is too slow with
their gigantic profile history.

Now two options :
- fallback to internal sqlite (bah!)
- build systemwide sqlite with this option (bah!)

Opinions on that ?
New diffs fallbacks to internal sqlite, as it seems the more
'reasonable' option.

Landry