On Tue, May 17, 2016 at 6:20 PM, Christopher Fick <[email protected]>
wrote:

> Just for clarity, I was clicking (XQuartz>Check for XQuartz updates...) in
> the "app" (Is app the correct terminology here?).
> The only reason XQ would have literally auto-updated is if it's set to do
> that by default. I typically turn auto-update off if I have an option, of
> which I don't recall having one put in front of me at any point when
> installing.
> Does the term "auto-update" apply to what I was doing as well--kind of,
> sort of, halfway manually updating?
>

It's using the auto-update framework, as opposed to you having to visit
xquartz.org to see if a new version is available, so yes. And it relies on
an XML feed that is no longer there, and which can't be safely redirected
because of the Sparkle MITM vulnerability.


> All that aside, if I understand correctly:
> Basically, anyone with a version earlier than XQ 2.7.9 must update by
> manually downloading from the (new) website because the website location
> has changed since 2.7.8... The reason updating/auto-updating though the XQ
> app doesn't work is because it wants it's update from the previous website
> location. The previous website could in theory link to the newer one for
> this update, but because of MITM it does not. Do I have that correct more
> or less?
>

Pretty much, yes.


> Just for peace of mind. In the future if I do choose to update:  Do I need
> to go through some measure to uninstall the previous version of XQ? Or is
> it perfectly fine to just download and install it over the old version? I
> assume I will be prompted to replace the older version if I install it into
> the same location.
>

You don't actually get an option to install it elsewhere. You do get
several confirmation prompts before the install, though. And you don't need
to uninstall anything, just install the new one (or reinstall the old if
needed).

-- 
brandon s allbery kf8nh                               sine nomine associates
[email protected]                                  [email protected]
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription: 
https://lists.apple.com/mailman/options/x11-users/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to