OpenBSD won't update Firefox, advises users to switch to ESR

Re:OpenBSD won't update Firefox, advises users to switch to ESR by bscphil on Sunday January 12, 2020 @09:20PM (#22031320)

I suppose I should clarify by "latest" that I mean a version of a piece of software that is actively supported and has all the security patches. Like it or not, the ecosystem is currently built around the assumption that you do want to have this, that nobody should still be running e.g. Firefox 34. The question is what the best way of shipping it is.

The conversation in the two posts you replied to isn't about whether you always want to be on the bleeding edge all the time, it's about whether it makes sense to have a centralized repository that contains the latest version on some supported channel, which isn't necessarily the same thing as the latest -nightly. I take the position that it is; that shipping a (potentially) different version of a library with every application is a bad approach which is often less secure and harder to maintain.

[ Parent | on HN ]

Re:OpenBSD won't update Firefox, advises users to switch to ESR by xg15 on Monday January 13, 2020 @03:15AM (#22032726)

But didn't the OP show exactly a situation where this system broke down?

There is a new version of the Rust library. In theory, either anything that supports it should be updated selectively (i.e. Firefox) or all consumers should be updated in lockstep. Yet in practice the maintener decided that neither option was feasible so nothing was updated at all. What went wrong here?

[ Parent | on HN ]