On Friday, December 19, 2014, Michal Hriň <h...@apache.org> wrote: > > > Dňa 19.12.2014 o 01:18 Kay Schenk napísal(a): > >> >> >> On 12/18/2014 02:22 PM, Andrea Pescetti wrote: >> >>> Michal Hriň wrote: >>> >>>> On Thursday, December 18, 2014, Kay Schenk wrote: >>>>>> >>>>>>> My main concern at this point is the availability of security updates >>>>>>> for this environment. I will be following up on a different thread >>>>>>> about >>>>>>> this. ... >>>>>>> >>>>>> http://wiki.centos.org/Download >>>> >>> >>> No need for a different thread, Michal's link says it all: CentOS 5 will >>> have security updates (even if limited to "important" security updates) >>> until 2017. The latest release of CentOS 5 is 5.11 from September 2014 >>> (so, more recent than the most recent OpenOffice version). That said, I >>> have nothing against bumping our baseline when appropriate (i.e., not in >>> 4.1.x) if there are valid reasons for it. >>> >>> Regards, >>> Andrea. >>> >> >> > If I understand correctly, > > Good news. One of my concerns has been with the CERT advisories that >> have emerged concerning glibc, now up to before version 2.21. >> >> > No need to have concerns, about version of packages in enterprise linux. > Packages have different version number than upstream. Example: > > glibc 2.10+6168464, but this package may contain security issues founded > from 2.21+ > > > And, of course we should check out our other needed sources -- openssl, >> etc. Hopefully I can get to that soon and report back. >> >> > I think that we are using lot of ours own libraries (and bundle it to > package), which are different from libraries in operating system. > "external_dep" is that .. (openssl 0.9.7? which is absolutely different > form Cent 5 ssl library).
actually we do that a lot, which really complicates our build requirements, so I would really like to reduce extern_dep to a bare minimum. It has grown (I think) because if one platform missed a library all platforms got it in extern_dep. rgds jan i > > - MH > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org > For additional commands, e-mail: dev-h...@openoffice.apache.org > > -- Sent from My iPad, sorry for any misspellings.