I'll see how the build on macOS goes, but likely won't be able to get to it 
until Monday.

> On Sep 29, 2020, at 2:52 PM, Don Lewis <truck...@apache.org> wrote:
> 
> On 29 Sep, Matthias Seidel wrote:
>> Hi Don,
>> 
>> Am 26.09.20 um 23:47 schrieb Don Lewis:
>>> On 26 Sep, Matthias Seidel wrote:
>>>> Hi all,
>>>> 
>>>> Am 25.09.20 um 18:05 schrieb Matthias Seidel:
>>>>> Am 25.09.20 um 14:01 schrieb Jim Jagielski:
>>>>>> That looks quite a bit more straightforward :-)
>>>>> Let's wait for Don's PR, this is only a minor update from Python 2.7.17
>>>>> to 2.7.18.
>>>> Merged now...
>>>> 
>>>> Unless Don wants to add something for the Java detection I would think
>>>> we are pretty close to a release candidate?
>>> I've got another nss upgrade in the works as well as a small serf bug
>>> fix.
>> 
>> OK, if that can be done quick *and* safe?
> 
> nss is somewhat risky.  We've had problems with upgrading it in the
> past, primarily with MacOS.  It does fix a fairly important CVE, though
> I don't know if it potentially affects our usage of nss.  I just
> submitted a pull request.
> 
> Serf should be fairly quick.  It's just a couple of patches
> cherry-picked from upstream to fix a CVE.
> 
> There are also a few new libxml2 CVEs, but not a new release of the
> library.  They can be fixed with some upstream cherry picks.
> 
>> Otherwise I doubt that we have a release in the next 2 weeks... ;-)
>> 
>> Regards,
>> 
>>    Matthias
>> 
>>> 
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>>> For additional commands, e-mail: dev-h...@openoffice.apache.org
>>> 
>> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org 
> <mailto:dev-unsubscr...@openoffice.apache.org>
> For additional commands, e-mail: dev-h...@openoffice.apache.org 
> <mailto:dev-h...@openoffice.apache.org>

Reply via email to