Re: Security advisories sinc 13/0 release

This is a multi-part message in MIME format...

------------=_1777198953-1253-26342
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Am 25.04.26 um 19:50 schrieb Charles Meier ([email protected] via
blfs-support Mailing List):
> 
> 
> On Thursday, April 16th, 2026 at 3:10 PM, Bruce Dubbs <[email protected]> wrote:
> 
>> In the six weeks since the LFS and BLFS 13.0 releases there have been an
>> inordinately large number of package security releases.
> 
> Having just built all of these on your list, I am not surprised at the quantity given the large number of warnings that went flying by in package after package. Warnings like "Someone is writing 1 or more bytes to a buffer of size 0" or "You declared $X to be const but now you are setting it" should probably be looked at as errors and investigated by the developers rather than simply ignoring them.

I think that humans are generally very good at ignoring warnings. ;)

But you can build the kernel with

	[*] Compile the kernel with warnings as errors

And the kernel devs take that seriously.  I only once encountered such a
warning-error, reported it and it led to the issue of a new kernel
within a day or so.

> 
> Also, after the /. article on Mozilla's use of Anthropics latest tool, I went and looked to see if there was a new release of Firefox. Sure enough, there is a 140.10.0esr w/ fixes for 10 high rated vulnerabilities.
> 
> https://archive.mozilla.org/pub/firefox/releases/140.10.0esr/source/firefox-140.10.0esr.source.tar.xz

There's an option in FF to automatically search for new versions and
notify the user if there is one.

Rainer


------------=_1777198953-1253-26342
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page

------------=_1777198953-1253-26342--