On 04/24/2016 07:43 PM, ToddAndMargo wrote:
>>> On Apr 24, 2016 20:32, "ToddAndMargo" <[log in to unmask]
>>> <mailto:[log in to unmask]>> wrote:
>>>
>>>     Hi All,
>>>
>>>     Seems like SL7 is not keeping up with Firefox and Thunderbird
>>>     updates anymore.  EL Linux is suppose to keep up with security
>>> updates
>>>     but Red Hat obviously picks and chooses: Firefox and Thunderbird
>>>     are typically left unpatched.
>>>
>>>     Is there some repo out there for Firefox and Thunderbird to
>>>     fills the gap?  Or, should I go back to using the binaries
>>>     from releases.mozilla.org <http://releases.mozilla.org>?
>>>
>>>     Many thanks,
>>>     -T
>
> On 04/24/2016 07:13 PM, Stephen John Smoogen wrote:
>> Why do you think they are unpatched? The Firefox and Thunderbird are
>> based off the upstream extended release cycle versions and not the
>> latest type. So the security fixes which are in ESR are there but new
>> features are not. If you need new features then you will need to work
>> from the upstream tar balls
>
> Hi Steven,
>
> That is just wishful thinking.  As vulnerabilities are discovered
> they are not added to the ESR, or if the are, we don't see them.
> Have you seen a single update come through to the current ESR?
> It is set and forget.  EL picks and chooses what they will keep
> up to date.  Firefox and Thunderbird ain't one of them.
>
> Do you know of a repo that does keep Firefox and Thunderbird
> up to date?  Or am I stuck with the binaries?
>
> -T
>


We are currently 38.7.0 ESR.  As far as ESR goes, it is on
45.0

http://releases.mozilla.org/pub/firefox/releases/45.0esr/

Pick and choose.



-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~