Firefox really, finally, actually fixed

Matt Dillon and Venkatesh Srinivas conspired to fix another nmalloc issue, which should resolve any remaining problems people were having with Firefox, and possibly other applications as well. Due to an oversight of sorts, all locking operations on nmalloc’s depot were ineffective, as if there were no locking at all. Curiously, it worked remarkably well considering such a large race condition was present.

Don’t upgrade, do recompile

A bump in shared library version for libssl/libcrypto means that any programs dependent on it will require a rebuild – including any pkgsrc programs.

This only affects you if you are running 2.7, for now.  It means that on upgrading from 2.6 to 2.8, any libssl-using programs will need to be updated.  This may not be a big thing, since pkgsrc-2010Q3 will also be out and people will want to upgrade anyway.