On 8/22/21 10:32 AM, Rhialto wrote:
On Sat 21 Aug 2021 at 17:19:12 -0500, Jason Bacon wrote:What I'm saying here is the bundled library *is* the problem since it has known vulnerabilities or bugs, and we can't just hack the build system toOne issue that I haven't seen mentioned is the need for some packages to have portability fixes, which then need to be replicated into vendored packages. That could be a good addition to the list of issues. -Olaf.
Yeah, with the rise of AARCH64 in scientific computing, this is probably worth mentioning explicitly alongside security and more general bugs. Thanks...