On Friday, December 19, 2014, Michal Hriň <h...@apache.org> wrote:

>
>
> Dňa 19.12.2014 o 01:18 Kay Schenk napísal(a):
>
>>
>>
>> On 12/18/2014 02:22 PM, Andrea Pescetti wrote:
>>
>>> Michal Hriň wrote:
>>>
>>>> On Thursday, December 18, 2014, Kay Schenk wrote:
>>>>>>
>>>>>>> My main concern at this point is the availability of security updates
>>>>>>> for this environment. I will be following up on a different thread
>>>>>>> about
>>>>>>> this. ...
>>>>>>>
>>>>>> http://wiki.centos.org/Download
>>>>
>>>
>>> No need for a different thread, Michal's link says it all: CentOS 5 will
>>> have security updates (even if limited to "important" security updates)
>>> until 2017. The latest release of CentOS 5 is 5.11 from September 2014
>>> (so, more recent than the most recent OpenOffice version). That said, I
>>> have nothing against bumping our baseline when appropriate (i.e., not in
>>> 4.1.x) if there are valid reasons for it.
>>>
>>> Regards,
>>>    Andrea.
>>>
>>
>>
> If I understand correctly,
>
>  Good news. One of my concerns has been with the CERT advisories that
>> have emerged concerning glibc, now up to before version 2.21.
>>
>>
> No need to have concerns, about version of packages in enterprise linux.
> Packages have different version number than upstream. Example:
>
> glibc 2.10+6168464, but this package may contain security issues founded
> from 2.21+
>
>
>  And, of course we should check out our other needed sources -- openssl,
>> etc. Hopefully I can get to that soon and report back.
>>
>>
> I think that we are using lot of ours own libraries (and bundle it to
> package), which are different from libraries in operating system.
> "external_dep" is that .. (openssl 0.9.7? which is absolutely different
> form Cent 5 ssl library).


actually we do that a lot, which really complicates our build requirements,
so I would really like to reduce extern_dep to a bare minimum.  It has
grown (I think) because if one platform missed a library all platforms got
it in extern_dep.

rgds
jan i

>
> - MH
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org
>
>

-- 
Sent from My iPad, sorry for any misspellings.

Reply via email to