Re: gcj and etch freeze
On Sat, Aug 19, 2006 at 02:59:28AM -0700, Steve Langasek wrote:
> > > Last I knew, it still had
> > > serious security problems.
>
> > Which ones? I can't see anything in the BTS.
>
> I wouldn't know them by bug number; previously though, the problem was that
> gcjwebplugin didn't have appropriate sandboxing.
Aaargh!! That is fixed now, is it?
> > > (BTW, why does the plugin package need to have
> > > the upstream version number in its name?)
>
> > It's a little weird. The package that puts the plugin into firefox dir (via
> > symlink) is java-gcj-compat-plugin, but gcjwebplugin-4.1 contains the actualy
> > object. I suppose when a few versions of gcjwebplugin-X.Y exist,
> > java-gcj-compat-plugin will decide which one is more suitable by changing the
> > dependency and the symlink.
>
> That sounds like a terrible amount of complexity to me. I can't imagine why
> it would ever be beneficial to carry more than one version of gcjwebplugin
> around in the archive at a time.
Agreed. What do the maintainers think?
--
Robert Millan
My spam trap is honeypot@aybabtu.com. Note: this address is only intended for
spam harvesters. Writing to it will get you added to my black list.
Reply to: