From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 1F9891581D8 for ; Wed, 4 Dec 2024 23:25:53 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 4FA3AE08CE; Wed, 4 Dec 2024 23:25:48 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 259F1E08BB for ; Wed, 4 Dec 2024 23:25:47 +0000 (UTC) Message-ID: Date: Thu, 5 Dec 2024 09:25:42 +1000 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [gentoo-user] Package "www-client/firefox" To: gentoo-user@lists.gentoo.org References: <675068a0.7b0a0220.30e30f.7bd5@mx.google.com> Content-Language: en-US From: Matt Jolly Autocrypt: addr=kangie@gentoo.org; keydata= xsFNBF6BjksBEAC1QaqF3zKOgdunRhkt9nXkdlsL1sriTBk3WSy4De6wYLjiSofGRJY5pAiH EnlD/oW+sxDQ1DQQ3jNW/xlLUKFKYRnWhmkUv7iy0VDFrdj3mZic1pWr5a+sFX9DZNdYxLaa RIVgkstsLbf0ks5EvIqk5d7Ty8B48CgZZL7RXpAP7xrOgmat+JXNovX4djPW7HyNfblcAbzj tsLcQf7/4Q0LfK7wW3MVJmpmNK7dSKKaWgSXY7IICird0tNMF41vuMRJIta0NtIARq+AjCxV 0iEb5odYIbrbamCpzhupJM8M5LPZkbQERIF+OTzGiXhlGVloxlB+vpTzv2oY+fQkLBSSL+NS P2Pv01exA+ezA+5r+KUClA7qUnC8UriwixjJuWfoe03sYRPb91z4nlBKiCP6+jcJpS4+KsgT +//r2PdHBQDC4kVimjWDfbfXoVUhtxbQ3t/Y1vro5WQvOsgNl53hWcuHd1O+zPS1d7x5xj7a otyLJbDwtNDtApHxNYld/w/uj0QpIlz1hj9QX/NthYe6nHYgPVtEmAXjqtdIxrlS6Qx/Gaqf xVhaxtLJVDWqba4GsVA1xlFuQKJ+RTT9OXGhpQNkLPo7rt5FP3C/SUVJa3YewE3x8vmHvfoK PoKGA/wnBCVO68yQw5K3opb5DC4Z9tngrwGXyfhZzE9Uqk+wswARAQABzR5NYXR0IEpvbGx5 IDxrYW5naWVAZ2VudG9vLm9yZz7CwZQEEwEKAD4WIQTdt8K8F88DrbOPnBZQ7FSNUuBRwAUC ZccI4wIbAwUJC5i9UAULCQgHAwUVCgkICwUWAwIBAAIeBQIXgAAKCRBQ7FSNUuBRwCNuEACi 1C6XSSPWfFh/14Tn3TqseLvX0554tmsW7FoxEu1jGQIEA2f6rtmn6P2ZKCTmqxzUC0sb17TL 8/8sP7ignGJ3nuPgEczv/VeNQziMOmfxjf2VLk8pQ0seQbAwNMvrgjgcRhCdqwIlQKHURlzj qUbNvp7czV8FVd2qV3iLcf3i8VNbqfBffsTxeyhV88ks9FmbT8VcO2bV1Snl6LsG8u3QKme/ kCxg438w1IozYIGP/2M/rl7SUPhuat66mptm9009g8xnXgJBiwI39ZsDhJ8x8sSN2tF3prsG 2SvInhROv8FBmN/DbjfCda2I3hSoSLp5Q/+FeYNJflcBcuWmEU77KhqSBFJrdPZg6+aleQsL vI2WPvwKWZzveUMwbn1ahnwrfLIW2Ue0JMIR/nRXUy7d7ngx111P27si27n/XNrtzCqWQnj9 MpcZ+8GO670H5MR1iV0FEG4rz1iEcw/fNgFFrF0HRgHXrUzSx/aKQDjvDrnZBmslnLXQ8uJS pYUCCluOE7xX6D4R2+K4u7KsEWFlCqhTGAeOMZLY5avjhiQF9ZKtsDcVY3fZwrih+uWvvpPF zAKy3hiY+uC3HQqvJYQofogm1Ls/5WYZ9syBjKPdFnpsj33NTTmDDAz+yl+Y1Unp4iU/SnyR JXB2usTR8b1rMywp4YI9B8OBd+RkBOVIGc7BTQRegY5LARAAs/Hifx+R6ItN95PhwcsGr8/V q8dOqTbPd72/BppY8yeJZFRTl0n24ZVWXBJKBSnIfe8uFmNO/f58yY/MJ2ADF5Sqyn8V76Nb t2JS+dqxlnKxkjsXiKJhZiJ0Mp2+oGO1mBbJpjqWGWiVDBp0P0O4DX+ELWI/MfGiavLO8BXl vL2/qlT8we4obExgStAClKqjM9eIKFL93xPrgS8sFmAGSHC4e0wD9YjjxX4AkIdoJ1F2m47y 2QgGKj9w16sqZswt0XOa+TLNIMEgXH24m66kQHUxE1JZfFDWX5HmC2BRFEfIjaQHsDLYBTYJ 8vkIUR0uZm9I/TUnAQMrN20/y2cbFIUynsNKArg03ZpzCxegOxJSPIv6j97Hy4byDyu/Ybj4 Z8d9/buGHHjzwRLkszyKEYcSSRVvk7Z1kSsfya7OmO7RMJoRwLH/CSZUR23q4X/w8oUSUXl/ S8+avuji3eDGk1Fyr+UjRabXqRL63wghBS895JWYAQRGcDL0d2x/cJi+JACT5Mezchgj393n 43yOvVeVotHvbk0ez+YOJ/pUDBFVzD0FPBeS2YTKrWJXRlxtRTei4B6LzbMFddMYclFDjVqq WcW+1d9Ck0H3pIB9BkAOcyZ7OLMH4GFxwPmR0xILBTt8ZnBbKrKDHikVMJoP1f9oEJ2HuQHe 51/w75JFpUkAEQEAAcLBfAQYAQoAJgIbDBYhBN23wrwXzwOts4+cFlDsVI1S4FHABQJld9e9 BQkLmM9yAAoJEFDsVI1S4FHApS8P/2Dovmb516e0PcmYvVoN835cEBgUEQc0lnQAYuNRIPgI CMfNfeZTRdANzyPYYdp+VQCzj95mUt4qlY0PkEGOR1b+2bjeyqp/zAHQShft7FHpsgeRObaW lKE6q9xwUGsOoOcBsWZiwd4xvalIaBG6uczlTrSGJycTF21c35pP6o/eiQs2d/qIVBUMdAtw kefO+pYds1YoyNW2YxGLThWAqNYoThGFsfOqrvLR2HWOcFeneR+PXx2loGdrHE/D6QXpVXxk qRNPig8E68gAVX7q8eRr5+bkJBrG2QvVsc0opiW6AljCJC0gJt5nuHKOObDAmoGx2PuRppT4 +wGd1yCElUZ602Opuf2gqS2nxSypf568EIcoSMEzbJFLrAoy3MReTMoltAJVJU8sA9OXYSOg AjHg7aU/nmO8KFHIZMiW24XJ577iU48UV+u8Rpmv4y16uAhp8AI4wvkk6xa5tNcCWU1Ati6Y yrdk2hf9dD29ePUkHKKSfbewr+qZ9dRL1dUXsaGa64oOXmUALxGNNzj7V828PbWa16x3JbYi gwBNqcgATaAZgDrXMV9ynB4aU1eSNNs/1R0Ic6B7c9yWaI568V7XKldus1QclpELQ4Lu+r/F H065qJMw4LqNs4gEDgd3JzNiNC0Jy+I8mD73YSeo87mE1KOCY0f9DNaBJ+v32E+Z In-Reply-To: <675068a0.7b0a0220.30e30f.7bd5@mx.google.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 2c7bb1da-c354-442b-8478-3070e8c7d6c5 X-Archives-Hash: 1ff75ce69393df3fdeefa0ab89a3e3af Hi Rainer, On 5/12/24 00:35, Dr Rainer Woitok wrote: > So which slot should I choose? Any opinions out there? I can't speak for Firefox, but I do maintain Chromium which is similar enough in terms of being a browser with a fast release cycle and several channels. I recommend keeping your browser as up-to-date as possible. The `rapid` channel for Firefox may result in more frequent updates for you as an end-user, but it always includes the latest fixes (and features) That's not saying that ESR is likely to be vulnerable, but the fixes going into ESR are going to be backported from the rapid and development channels. A lot of work goes into ensuring that these backports are done in a timely manner, but it's not beyondthe realm of possibility for one to be missed, or announced and fixed in rapid but not in ESR leaving those users vulnerable. IMO if you're not an enterprise you should be running rapid. If you are an enterprise you have your own requirements to think about, but you should probably also be running rapid. In Chromium terms, I often run the beta (or dev) channels, as I know that security fixes for the stable channel are implemented in dev and backported from there. I hope that helps, I need to run and get breakfast. Cheers, Matt