> Hi Paul, since you mentioned firefox I'll just mention (to everybody
> else, I suspect you don't care ;) that 48.0.2 almost certainly has
> vulnerabilities. At the moment ff45 apparently has ESR releases -
> until ff-52 is out.  But that still means rebuilding on every point
> releasse.

Good point.  I guess I don't mind building 45.  (I really don't like
this "rapid release" paradigm, but on the other hand with so many
miscreants exploiting any vulnerabilities...)

> But I'm glad you are updating. I was going to suggest that you read
> the errata, but in fact those for sysv probably don't specifically
> mention anything you build - in practice, the versions in svn for the
> xorg packages (not libXfont-2), openssl, openssh, gnutls, gdk-pixbuf [
> that is probably a newer minor version ], ImageMagick (-6, in your
> case) and probably some others are vulnerability fixes.

No, I will checkout at least the 7.10 stable release errata.  One of
the reasons I trail is to let the adventurous deal with the svn
hassles.  I _want_ there to be errata!  I've put a second i7 into
service as a compiling engine, or I wouldn't have even considered it.
I've been using my own infrastructure for over a decade, and it takes a
good long time to check on and reconcile differences.  It has to be
worth the effort.

> The point is that we're continually trying to get better. I

Not me.  I appreciate the work you all do, but I make systems to _use_,
not for the glory of making them.  (And it has been so since I soldered
up my first IMSAI in 1976!)

> recognize that for Paul moving to 7.10 is a big jump forward, but

No, actually it the shortest jump yet!  I did 4.1, 6.1, 2.1, 6.6,
7.2, & 7.7.

> old versions are not maintained.  If anybody is starting now and
> intending to keep using LFS, my advice is to use svn and to watch for
> what changes until 8.0 is released.

At a certain point one is entitled to believe "Life's too short."  I
still don't know what I'll do with it.  7.7 satisfies me.

p.s. I supplied Bruce with a new md5sums file.
-- 
Paul Rogers
[email protected]
Rogers' Second Law: "Everything you do communicates."
(I do not personally endorse any additions after this line. TANSTAAFL :-)

-- 
http://www.fastmail.com - mmm... Fastmail...

-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to