Helping nvu

Jordi Mallach jordi at debian.org
Thu Sep 15 10:52:35 UTC 2005


Hey guys,

I'm having a look at the contents of nvu's source package and I can't
say I'm happy at all.

1) doesn't use dpatch or similar, but a *hardcoded* list of patches to
apply inside debian/rules.

2) no extension management at all*. To install the Catalan localisation,
I need to run as root for the first time and all that stuff.

3) looks like uses an old run-mozilla.sh script which is prone to
symlink attacks. For my local distro fork I grabbed firefox's which
looks better.

4) in general, appears to have a long list of unfixed security bugs that
are present in other moz products.

I wonder if anyone can lend a hand to the maintainer, espcecially
regarding your extension registration patches. nvu doesn't have anything
like update-nvu-chrome or anything that we can use.

Firefox patches will hopefully apply to some extent, I guess.

Jordi
-- 
Jordi Mallach Pérez  --  Debian developer     http://www.debian.org/
jordi at sindominio.net     jordi at debian.org     http://www.sindominio.net/
GnuPG public key information available at http://oskuro.net/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20050915/6ff4d17b/attachment.pgp


More information about the pkg-mozilla-maintainers mailing list