Am 02.02.2012 08:32, schrieb Marcus Meissner:

FF 10.0 will also appear in the 11.4 and 12.1 regular update repos this week.

Ciao, Marcus

That's good to hear. Did you notice FF 10 is a long term support release providing updates until the release of FF 17? So you maybe want to consider not shipping future major releases but instead stay within the 10 series (for the update-repo)? The same is true for Thunderbird. The only difference for Suse 11.4: It shipped with TB 3.6. But 3.6 support will end in a couple of weeks (they said: After the release of the LTS version 10). So you may want to consider preparing an upgrade to TB 10 for Suse 11.4 - preferably through the regular update channel. Thank you very much, Martin -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 02/02/2012 06:40 AM, Wolfgang Rosenauer wrote:

We are aware of the ESR releases and the lifetime of the FF3.6 and TB3.1 series. What we haven't discussed in detail yet is if we want those and stay on them in the official update channel for openSUSE!

Hmm... Since opensuse isn't a rolling-release (yet), I would propose that the update repo move to 10 and hold there for ff & tb. This will draw howls from those whose favorite add-ons are broken by the update from 3.6->10, but if the XSS security considerations warrant it, it is better to have opensuse's reputation for 'security' within its 'maintained' (not yet EOL) releases take precedent over the add-on consideration. Other than add-ons, the upgrade path from 3.6 -> 10 is seamless. In summary: http://ftp5.gwdg.de/pub/opensuse/update/ (move to 10 and stick for LTS) http://ftp5.gwdg.de/pub/opensuse/repositories/mozilla/ (continue to follow the rapid-fire releases) You don't want distrowatch footnoting that some supported versions contain serious vulnerabilities. Just my take on the issue. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Fri, Feb 3, 2012 at 1:40 PM, John Andersen wrote:

On 2/3/2012 9:06 AM, David C. Rankin wrote:

...

On 02/02/2012 06:40 AM, Wolfgang Rosenauer wrote:

...

We are aware of the ESR releases and the lifetime of the FF3.6 and TB3.1 series. What we haven't discussed in detail yet is if we want those and stay on them in the official update channel for openSUSE!

Hmm...

Since opensuse isn't a rolling-release (yet), I would propose that the update repo move to 10 and hold there for ff & tb. This will draw howls from those whose favorite add-ons are broken by the update from 3.6->10, but if the XSS security considerations warrant it, it is better to have opensuse's reputation for 'security' within its 'maintained' (not yet EOL) releases take precedent over the add-on consideration. Other than add-ons, the upgrade path from 3.6 -> 10 is seamless.

In summary:

http://ftp5.gwdg.de/pub/opensuse/update/ (move to 10 and stick for LTS)

http://ftp5.gwdg.de/pub/opensuse/repositories/mozilla/ (continue to follow the rapid-fire releases)

You don't want distrowatch footnoting that some supported versions contain serious vulnerabilities.

Just my take on the issue.

I fully agree.  Having two choices seems rational, and most of the plugin issues have gone away anyway by the time you get to 10.

Since every mail account I use is IMAP, swapping out one MUA for another is not a problem.  I might feel differently if I was still running POP accounts. (why would I run pop?)

There is really not that much that OpenSuse does to stock TB anyway, other than packaging.  I seriously doubt they have the time to evaluate every line of code in every patch, so the "security" issue is mostly bogus in my mind.

Backporting real security fixes to something as old as 3.x is just as risky as updating to a later build.

This seems to be a political issue, perhaps there is some friction between Mozilla and Opensuse.  We see wholesale adoption of many things way too soon, (systemd, entire kde 4.0, Pulse Audio, kmail2 etc. etc. etc.) but then we are stuck multiple releases back on Mozilla apps. Why the dichotomy?

There is no dichotomy. New releases of opensuse get leading edge software. Old releases maintain (in the main repos) the software they were released with. It's just that what is leading edge on the day of release is often old and not-supported 18 months later. Greg -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am 03.02.2012 20:50, schrieb Smartysmart34:

I agree. But nevertheless: Keeping TB on a release with known security issues is a very bad idea. People using a supported version of OpenSuse should receive security patches. And with Mozilla this now means a new major version. I think the move to TB10 (and staying there) is the best compromise between staying vulnerable and shipping new major releases continuously.

"Keeping TB on a release with known security issues" never was an option. And about version upgrades you never get everyone out there having the same expectations. I do not really get the point of the discussion at the moment. Wolfgang -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am 03.02.2012 21:06, schrieb Wolfgang Rosenauer:

Do we talk 3.1.x or rapid release here? For 3.1.x almost every line of code change is clear to us but for sure not for the rapid releases.

Not sure about the others but I am talking about the fact, that with the release of TB 10 the old 3.1 line does not receive any security patches any more. It is now discontinued. So the question / request is to ship TB 10 as an update through the 11.4 update channel without forcing the users to switch to Mozilla repos in order to get a secure / patched version of TB. Cheers, Martin -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

John Andersen wrote:

On 2/3/2012 9:06 AM, David C. Rankin wrote:

I fully agree. Having two choices seems rational, and most of the plugin issues have gone away anyway by the time you get to 10.

---- By gone away, you mean their compatibility fell away during earlier releases, so by the time you get to 10, with nothing supported there is no pain in upgrading? Or do you mean I can take my 3.6 profile and upgrade it to 10 and I shouldn't expect any compatibility problems? I feel like I'm supporting some extensions now with bailing wire and duct tape... one of the first things I do with a new browser download is install cromebug that works with it, and unpack all the .xpi files so I can see what's blown up this time... Oi!

Since every mail account I use is IMAP, swapping out one MUA for another is not a problem. I might feel differently if I was still running POP accounts. (why would I run pop?)

---- Thunderbird 3.x series and above was to default treating user email accounts as though they were 'far away [i.e. POP] storage... thus more than once as some machine or another has been upgraded on purpose or by accident or forgetfulness or feeling masochistic, I've gotten a 6GB store maid of my IMAP dir in some local mail store or another. And then there was the time I setup a folder to auto expire, only to have *all* my archives going back 10 years be 'expired'... thank Goddess for backups... (still not sure how the setting got propagated, but it did... I found it on every expired folder... *ouch*... Of course 2.x has become a bit unstable with Win' rolling over a choking on 45+ minute profile syncs at login/logout, and zero random files in random extensions... tthen I don't understand why my working copies stop working -- seems to mostly happen with TB and FFX... though now days, I knwo enough just to 'tar up a working profile and untar it in the place of the corrupt one... also helps keep my profiles synced......

Backporting real security fixes to something as old as 3.x is just as risky as updating to a later build.

--- Good thing I stick with my backporting to 2.x... ;-)

This seems to be a political issue, perhaps there is some friction between Mozilla and Opensuse.

---- ?!? Really? Can't imagine why, they way they each like to move full steam in each of their areas -- imaging an area you thought was stable becoming unstable as the same time the stuff you are working on... surprise... (of course now that you say it, in some ways, the projects are very similar in energy... so maybe its a case of too much alike and not seeing it? We see wholesale adoption of many things way too soon,

(systemd, entire kde 4.0, Pulse Audio, kmail2 etc. etc. etc.) but then we are stuck multiple releases back on Mozilla apps. Why the dichotomy?

--- Good Q. But me-- I boot w/o a ram disk, and use FF3.6/TB2.x.. (yeah, planning upgrades... (have even tried out newer versions... (was easier than porting the old ones to new platforms...)... An my kernel -- it's not even at 3.2 yet, (still running 3.1.2... ).. hey that reminds me -- gotta go get the patches for imq for 3.2... (ads a wrinkle to my build process...)... -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Basil Chupin [02-05-12 01:54]:

On 05/02/12 16:41, Linda Walsh wrote:

...

John Andersen wrote:

...

On 2/3/2012 9:06 AM, David C. Rankin wrote:

...

I fully agree. Having two choices seems rational, and most of the plugin issues have gone away anyway by the time you get to 10.

---- By gone away, you mean their compatibility fell away during earlier releases, so by the time you get to 10, with nothing supported there is no pain in upgrading?

Or do you mean I can take my 3.6 profile and upgrade it to 10 and I shouldn't expect any compatibility problems?

I have been using Firefox since year dot. Right now I am running the latest 10.0 installed via Yast and of the 12 extensions I have, not to mention my preferred theme called Nautipolis, all are working perfectly.

In another list one person was moaning, akin to yourself, that suddenly he cannot use a particular add-on now that he switched over to FF 10.0. Oh woe is him, and the gnashing of teeth! He has tried everything to get this extension working but, alas and alack, he is unable to get it work! Does anyone have a suggestion, he asked, as to how to get it working? I told him YES - just wait for the author of the extension to update it to work with 10.0 because he has already been asked to do.

The add-ons, you must know, are written by third-parties, just like a lot of the stuff you install and use in openSUSE, and therefore they rely on their authors to keep them up-to-date with the current release of, say, Firefox or Thunderbird.

If you are still stuck with FF 3.6 I am therefore not really surprised that you are having/have been having problems with extensions/add-ons as some of them have been incorporated into FF itself and are no longer required as add-ons.

Moreover, some of the add-ons have alternatives so if the author of one of your favourite add-ons gets run over by a bus then there will most probably be another add-on, by a different author, to replace it. And if you haven't considered the possibility that an author of an add-on cannot be run over by a bus and can no longer maintain that add-on for your Firefox v3.6 then you shouldn't be doing what you are doing :-) .

Why is it that you consider MozillaFirefox/Thunderbird in this light and *not* openSUSE :^) -- (paka)Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 http://en.opensuse.org openSUSE Community Member Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am 03.02.2012 18:06, schrieb David C. Rankin:

On 02/02/2012 06:40 AM, Wolfgang Rosenauer wrote:

...

We are aware of the ESR releases and the lifetime of the FF3.6 and TB3.1 series. What we haven't discussed in detail yet is if we want those and stay on them in the official update channel for openSUSE!

Hmm...

Since opensuse isn't a rolling-release (yet), I would propose that the update repo move to 10 and hold there for ff & tb. This will draw howls from those whose favorite add-ons are broken by the update from 3.6->10, but if the XSS security considerations warrant it, it is better to have opensuse's reputation for 'security' within its 'maintained' (not yet EOL) releases take precedent over the add-on consideration. Other than add-ons, the upgrade path from 3.6 -> 10 is seamless.

In summary:

http://ftp5.gwdg.de/pub/opensuse/update/ (move to 10 and stick for LTS)

http://ftp5.gwdg.de/pub/opensuse/repositories/mozilla/ (continue to follow the rapid-fire releases)

You don't want distrowatch footnoting that some supported versions contain serious vulnerabilities.

Just my take on the issue.

Thank you. This is exactly what I would vote for. I hope this is going to happen. Cheers, Martin -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Thu, Feb 2, 2012 at 08:47, Basil Chupin wrote:

...

...

PS - Read article and download FF 10 from link given. I just installed it and it works brilliantly (faster than #9 as far as I am concerned).

Or.... install Firefox 10 from the openSUSE Mozilla repo...

http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ for 12.1.

I have this mozilla rep enabled, and I check daily for ALL updates/upgrades.

So far not a squeak about FF #10 from either YaST or zypper.

You may want to poke it again then because I installed FF10 from there about an hour ago. :-) C. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 02/02/12 19:08, C wrote:

On Thu, Feb 2, 2012 at 08:47, Basil Chupin wrote:

...

...

...

PS - Read article and download FF 10 from link given. I just installed it and it works brilliantly (faster than #9 as far as I am concerned). Or.... install Firefox 10 from the openSUSE Mozilla repo...

http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ for 12.1. I have this mozilla rep enabled, and I check daily for ALL updates/upgrades.

So far not a squeak about FF #10 from either YaST or zypper. You may want to poke it again then because I installed FF10 from there about an hour ago. :-)

Just poked it again a minute ago. Still not a squeak. BC -- "If I were a rich man, yubbydibbydibbydibbydibbydibbydibbydum. All day long I’d biddybiddybum, if I were a wealthy man. Which probably explains why I’m not." -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 02/02/12 19:55, Andreas Jaeger wrote:

On Thursday, February 02, 2012 09:46:11 Basil Chupin wrote:

...

On 02/02/12 19:08, C wrote:

...

On Thu, Feb 2, 2012 at 08:47, Basil Chupin wrote:

...

...

...

PS - Read article and download FF 10 from link given. I just installed it and it works brilliantly (faster than #9 as far as I am concerned). Or.... install Firefox 10 from the openSUSE Mozilla repo...

http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ for 12.1. I have this mozilla rep enabled, and I check daily for ALL updates/upgrades.

So far not a squeak about FF #10 from either YaST or zypper. You may want to poke it again then because I installed FF10 from there about an hour ago. :-) Just poked it again a minute ago. Still not a squeak. It's there - run "zypper se -s MozillaFirefox" - if you have the above repo added to your repo list,

Andreas

Thanks Andreas. Normal 'zypper' did not do anything but using 'zypper dup --from" not only upgraded Firefox but Thunderbird as well. Thanks again. BC -- "If I were a rich man, yubbydibbydibbydibbydibbydibbydibbydum. All day long I’d biddybiddybum, if I were a wealthy man. Which probably explains why I’m not." -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 02/02/12 20:19, phanisvara das wrote:

On Thu, 02 Feb 2012 14:43:52 +0530, Basil Chupin wrote:

...

On 02/02/12 19:55, Andreas Jaeger wrote:

...

On Thursday, February 02, 2012 09:46:11 Basil Chupin wrote:

...

On 02/02/12 19:08, C wrote:

...

...

>> PS - Read article and download FF 10 from link given. I just >> installed it and it works brilliantly (faster than #9 as far as I >> am concerned). > Or.... install Firefox 10 from the openSUSE Mozilla repo... > > http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ > for > 12.1. I have this mozilla rep enabled, and I check daily for ALL updates/upgrades.

So far not a squeak about FF #10 from either YaST or zypper. You may want to poke it again then because I installed FF10 from

On Thu, Feb 2, 2012 at 08:47, Basil Chupin wrote: there about an hour ago. :-) Just poked it again a minute ago. Still not a squeak. It's there - run "zypper se -s MozillaFirefox" - if you have the above repo added to your repo list,

Andreas

Thanks Andreas. Normal 'zypper' did not do anything but using 'zypper dup --from" not only upgraded Firefox but Thunderbird as well.

so it's not the mirrors, as i thought. strange that the update didn't come thru' w/o zypper dup

I think so too.

. thanks from me too, for the info.

Sharing experiences is what we are all about here :-) . And we don't need to be Members :-) . BC -- "If I were a rich man, yubbydibbydibbydibbydibbydibbydibbydum. All day long I’d biddybiddybum, if I were a wealthy man. Which probably explains why I’m not." -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Thursday, February 02, 2012 10:13:52 Basil Chupin wrote:

On 02/02/12 19:55, Andreas Jaeger wrote:

...

On Thursday, February 02, 2012 09:46:11 Basil Chupin wrote:

...

On 02/02/12 19:08, C wrote:

...

On Thu, Feb 2, 2012 at 08:47, Basil Chupin

wrote:

...

...

...

...

> PS - Read article and download FF 10 from link given. I just > installed it and it works brilliantly (faster than #9 as far as I > am concerned).

Or.... install Firefox 10 from the openSUSE Mozilla repo...

http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ for 12.1.

I have this mozilla rep enabled, and I check daily for ALL updates/upgrades.

So far not a squeak about FF #10 from either YaST or zypper.

You may want to poke it again then because I installed FF10 from there about an hour ago. :-)

Just poked it again a minute ago. Still not a squeak.

It's there - run "zypper se -s MozillaFirefox" - if you have the above repo added to your repo list,

Andreas

Thanks Andreas. Normal 'zypper' did not do anything but using 'zypper dup --from" not only upgraded Firefox but Thunderbird as well.

If your repo is called Mozilla, you can also run: zypper in --from Mozilla MozillaFirefox Andreas -- Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 02/02/2012 07:39 PM, Basil Chupin wrote:

On 02/02/12 20:33, Andreas Jaeger wrote:

...

On Thursday, February 02, 2012 10:13:52 Basil Chupin wrote:

...

On 02/02/12 19:55, Andreas Jaeger wrote:

...

On Thursday, February 02, 2012 09:46:11 Basil Chupin wrote:

...

On 02/02/12 19:08, C wrote:

...

On Thu, Feb 2, 2012 at 08:47, Basil Chupin wrote: >>> PS - Read article and download FF 10 from link given. I just >>> installed it and it works brilliantly (faster than #9 as far as I >>> am concerned). >> Or.... install Firefox 10 from the openSUSE Mozilla repo... >> >> http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ >> for 12.1. > I have this mozilla rep enabled, and I check daily for ALL > updates/upgrades. > > So far not a squeak about FF #10 from either YaST or zypper. You may want to poke it again then because I installed FF10 from there about an hour ago. :-) Just poked it again a minute ago. Still not a squeak. It's there - run "zypper se -s MozillaFirefox" - if you have the above repo added to your repo list,

Andreas Thanks Andreas. Normal 'zypper' did not do anything but using 'zypper dup --from" not only upgraded Firefox but Thunderbird as well. If your repo is called Mozilla, you can also run: zypper in --from Mozilla MozillaFirefox

Every day something new to learn.....it never stops! :-D .

Thanks for this. I've added this to my list of "must knows" in the Little Black Book.

BC

Yesterday, I upgraded but had to revert back to #9. #10 would crash trying to restore tabs. Mark -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Fri, Feb 3, 2012 at 19:07, James Knott wrote:

...

Or.... install Firefox 10 from the openSUSE Mozilla repo...

http://download.opensuse.org/repositories/mozilla/openSUSE_12.1/ for 12.1.

I added that link to my repositories, but Firefox 10 does not show up as being available in Software Management.  Is it necessary to manually update it from that site?

Ummmm.... OK, first thing to note... this is one of the standard Community Repos that you can get through the usual Add Community repositories steps. YaST > Software > Software repositories > Add > Community Repositories, and select Mozilla from the list.... so adding it isn't complicated or out of the usual process. If you set this repo to have a higher priority (ie a prio less than 99) it should offer the newer version when you go to Software Manager and look at what upgrades are available. Alternatively, search for Firefox, click on it so that it's highlighted, and click the Versions tab in the lower right area. If you select the Mozilla repo in your list of available repos (in the software manager) you will also get a blue link at the top of the appication list which you can click to switch updates to explicitly use this (Mozilla) repository for updates/installs. This is all reasonably well documented, and pretty logical/intuitive... See for example: http://en.opensuse.org/YaST_Software_Management http://en.opensuse.org/SDB:Add_package_repositories http://doc.opensuse.org/documentation/html/openSUSE/opensuse-startup/part.re... C. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org