#2781: Consider adding Popt to LFS
----------------------------------------+-----------------------------------
 Reporter:  ra...@…                     |       Owner:  lfs-b...@…              
     
     Type:  enhancement                 |      Status:  new                     
     
 Priority:  low                         |   Milestone:  6.8                     
     
Component:  Book                        |     Version:  SVN                     
     
 Severity:  minor                       |    Keywords:                          
     
----------------------------------------+-----------------------------------

Comment(by matt...@…):

 Hi Randy,

 Pkg-Config also includes a copy of Glib, which could also be prone to
 vulnerabilities too.  Unfortunately, to fully test Glib-2.26.0, requires
 at least 12 dependencies (I still haven't gotten a full passing testsuite
 yet).

 Things get even more "interesting" for another LFS package, Gettext, which
 has optional dependencies on libxml2, java, fortran...

 So, in short, whilst I don't have an objection against adding popt per-se,
 it has the potential to open up the floodgates for further package
 additions.

 Maybe an easier to manage approach here would be to add a note to those
 packages that bundle some of their dependencies mentioning that the reader
 may want to rebuild them after installing the relevant BLFS packages?

 Thanks,

 Matt.

-- 
Ticket URL: <http://wiki.linuxfromscratch.org/lfs/ticket/2781#comment:1>
LFS Trac <http://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-book
FAQ: http://www.linuxfromscratch.org/lfs/faq.html
Unsubscribe: See the above information page

Reply via email to