[Bugs] #694 URGE: xulrunner: security update

[SugarLabs Bugs]

#694: xulrunner: security update
------------------------------+---------------------------------------------
    Reporter:  sascha_silbe   |          Owner:  sascha_silbe               
        Type:  defect         |         Status:  new                        
    Priority:  Urgent         |      Milestone:  Unspecified by Release Team
   Component:  sugar-jhbuild  |        Version:  Git as of bugdate          
    Severity:  Critical       |     Resolution:                             
    Keywords:                 |   Distribution:  Unspecified                
Status_field:  Assigned       |  
------------------------------+---------------------------------------------

Comment(by tomeu):

 Replying to [ticket:694 sascha_silbe]:
 > xulrunner 1.9.0.7 has security issues that are already fixed in the
 distros, but 1.9.0.8 has not been released yet, so we need to pull the
 patches from e.g. Debian and apply on our own.

 Should we move to 1.9.1 now that most distros are using it? The closer
 jhbuild is to the current development versions of distros, the easier will
 be to catch integration issues in jhbuild, where it's easier to fix them.

 Also, do we need to worry about security in jhbuild? Given that it is a
 development tool.

-- 
Ticket URL: <http://dev.sugarlabs.org/ticket/694#comment:1>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system