Any progress on nss?

On 30 Sep, Jim Jagielski wrote:
> I'll see how the build on macOS goes, but likely won't be able to get to it 
> until Monday.
> 
>> On Sep 29, 2020, at 2:52 PM, Don Lewis <truck...@apache.org> wrote:
>> 
>> On 29 Sep, Matthias Seidel wrote:
>>> Hi Don,
>>> 
>>> Am 26.09.20 um 23:47 schrieb Don Lewis:
>>>> On 26 Sep, Matthias Seidel wrote:
>>>>> Hi all,
>>>>> 
>>>>> Am 25.09.20 um 18:05 schrieb Matthias Seidel:
>>>>>> Am 25.09.20 um 14:01 schrieb Jim Jagielski:
>>>>>>> That looks quite a bit more straightforward :-)
>>>>>> Let's wait for Don's PR, this is only a minor update from Python 2.7.17
>>>>>> to 2.7.18.
>>>>> Merged now...
>>>>> 
>>>>> Unless Don wants to add something for the Java detection I would think
>>>>> we are pretty close to a release candidate?
>>>> I've got another nss upgrade in the works as well as a small serf bug
>>>> fix.
>>> 
>>> OK, if that can be done quick *and* safe?
>> 
>> nss is somewhat risky.  We've had problems with upgrading it in the
>> past, primarily with MacOS.  It does fix a fairly important CVE, though
>> I don't know if it potentially affects our usage of nss.  I just
>> submitted a pull request.
>> 
>> Serf should be fairly quick.  It's just a couple of patches
>> cherry-picked from upstream to fix a CVE.
>> 
>> There are also a few new libxml2 CVEs, but not a new release of the
>> library.  They can be fixed with some upstream cherry picks.
>> 
>>> Otherwise I doubt that we have a release in the next 2 weeks... ;-)
>>> 
>>> Regards,
>>> 
>>>    Matthias
>>> 
>>>> 
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>>>> For additional commands, e-mail: dev-h...@openoffice.apache.org
>>>> 
>>> 
>> 
>> 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org 
>> <mailto:dev-unsubscr...@openoffice.apache.org>
>> For additional commands, e-mail: dev-h...@openoffice.apache.org 
>> <mailto:dev-h...@openoffice.apache.org>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Reply via email to