Because of the security problem in mozilla<1.5, I rebuilt it and 
galeon.  Of course, that got me into the usual dance of rebuilding 
other packages.  Two weird things have popped up.

First, galeon complains that the "compiled mozilla version  != detected 
mozilla_version":  it doesn't seem able to determine the version of 
mozilla.

Second, on 1.6.1 several packages used the pkgsrc version of openssl, 
rather than the built-in one.  Is this necessary?

		--Steve Bellovin, http://www.research.att.com/~smb