On Sun, Mar 16, at 06:09 Alexander E. Patrakov wrote:
> Hello,
> 
> BLFS currently includes a patch, 
> http://www.linuxfromscratch.org/patches/blfs/svn/pcre-7.6-abi_breakage-1.patch,
>  
> that is meant to preserve binary compatibility with old versions. I.e., 
> without 
> the patch, one has to recompile all dependent packages when upgrading from 
> PCRE 
> < 7.6 to 7.6. However, do we really care about binary compatibility in BLFS? 
> The 
> only reason this patch may be needed in a source-based distro is to preserve 
> compatibility with commercial binary-only programs linked against old PCRE.
> 

First sorry for my absence,

Now,

I guess it doesn't really make sense to apply the patch in a fixed
Book release and (your reasoning) is a good excuse (and safe) to remove
it when we branch; (but) it does make sense for those who wants to upgrade
to a pcre-7.6 version (which fixes the known vulnerabilities in previous
releases) and don't want to re-compile all the packages that got linked
against an old pcre. [remembers me of something: How the people who don't
normally re-build frequently, taking notices about security issues?
We used to have a security list but the last message is two years old.
Personally I am taking the GLSA(Gentoo Linux Security Advisory) alerts.]

In any case the patch applied upstream, so (personally) I don't find any
harm to keep it in.

-- 
http://wiki.linuxfromscratch.org/blfs/wiki/Hacking
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
  • PCRE Alexander E. Patrakov
    • Re: PCRE Ag. D. Hatzimanikas

Reply via email to