Partial fix for CVE-2015-4495/pdf.js in Jessie?

Moritz Mühlenhoff jmm at inutil.org
Sat Aug 15 10:29:32 UTC 2015


On Wed, Aug 12, 2015 at 10:05:14PM +0200, David Prévot wrote:
> Le 12/08/2015 19:49, Moritz Mühlenhoff a écrit :
> 
> > What is the use case of xul-ext-pdf.js, TTBOMK there is no other browser
> > in Debian capable of running Xul extensions other than Iceweasel?
> 
> I honestly wonder (since it’s already built-in Iceweasel).

Rule of thumb: If you as the maintainer don't know the use case, get rid
of it :-)

Especially since it will break with updated Iceweasel releases from time
to time.

> We haven’t yet discuss if it would be a good
> idea to build the part currently shipped in iceweasel from the pdf.js
> source, but that could be done with before Stretch if it’s worth it.

I'd rather not, since we update src:iceweasel almost monthly anyway
and this only cause trouble to keep them in sync.

Cheers,
        Moritz




More information about the pkg-mozilla-maintainers mailing list