Firefox-3.0 in Gutsy has multiple open security vulnerabilities and should be updated or removed

[Scott Kitterman]

Binary package hint: firefox

In Gutsy, firefox-3.0 is in Universe, but due to it's licensing restrictions it cannot really be maintained by MOTU. It should either be updated by mozillateam or removed.

[Scott Kitterman (kitterman)]

Only applies to Gutsy.

[Martin Pitt (pitti)]

It is not possible to remove packages from a stable release. In fact, when introducing firefox-3.0 into gutsy's universe I raised this very point (someone has to maintain it), but was ignored...

Mozilla team, does the hardy package build/work on intrepid, too? If so, we could just upload it to gutsy-proposed?

[Scott Kitterman (kitterman)]

Could this be converted to a transtional package in -updates that would
switch people back to firefox?

[Alexander Sack (asac)]

On Thu, Oct 16, 2008 at 11:57:41AM -0000, Scott Kitterman wrote:
> Could this be converted to a transtional package in -updates that would
> switch people back to firefox?
>

jdong and fta are working on a backport. we just need to get them work
together (as jdong appeared to have prepared an update even though we
started independently on setting up a maintenance branch for gutsy).

 - Alexander

[Sergio Zanchetta (primes2h)]

The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life -
http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the
Gutsy task.