On 11/30/22 11:41, Chris Schanzle via CentOS-devel wrote:
Thanks for the reference, Simon. [tl;dr: delays due to CentOS folks repeating tremendous effort RH already solved.] While I am grateful for everyone's time and efforts, it is hard to understand why there isn't more technology transfer within RH to the CentOS folks if they're one big happy family. And disappointing there is no communication on this issue here.
With vulnerable internet-interacting apps like Thunderbird and Firefox (possibly others), IMHO CentOS 7 is unsafe for general use. Effectively EOL. I'm sad, but no time for self pity when there's work to replace the OS on our systems...
Thank you, CentOS team. Incredible success for many years - I've enjoyed the ride with you.
These (firefox and thunderbird) are now released.
Regardless, these things still need to be built in the CentOS Infrastructure. Just FYI, i had to bootstrap all of the following to make this work:
rust-1.54 rust-1.58 rust-1.62 devtoolset-12 llvm-toolset-12.0 llvm-toolset-13.0 llvm-toolset-14.0
Many of these items needed to be combined together in different buildroots to get different library links.
I also provided the required source packages to other people so they could build this as well since not all the things required to build Firefox/Thunderbird are part of the distribution.
The real bottom line here is that this was not easy to do. It requires MANY things that are newer than the items released in EL7. But once built, it still needs to run on the items included in EL7.
This was much easier to do in both CentOS Stream 8 and CentOS Stream 9 as the toolsets are all part of those distribution. They are not part of the RHEL 7 (so also not part of CentOS Linux 7).
Thanks, Johnny Hughes
On 11/30/22 3:45 AM, Simon Matter wrote:
OK, this is a known issue as seen here:
https://forums.centos.org/viewtopic.php?f=51&t=79706
Seems then that all users of CentOS 7 are at risk if they are using Firefox or Thunderbird on it.
And that's for three months now. Not good.
Dear Red Hat, how can you left us in the rain that way?
Regards, Simon
Hi Chris,
[No response on CentOS list, so trying CentOS-devel.]
-------- Forwarded Message -------- Subject: [CentOS] CentOS 7: Missing Thunderbird Updates Date: Mon, 21 Nov 2022 15:33:56 -0500 From: Chris Schanzle via CentOS centos@centos.org Reply-To: Chris Schanzle christopher.schanzle@nist.gov, CentOS mailing list centos@centos.org To: CentOS mailing list centos@centos.org
Hi,
Looks like CentOS 7 hasn't shipped Thunderbird updates for a while. The latest I see in repos is:
Sep 1 15:22 thunderbird-91.13.0-1.el7.centos.x86_64.rpm
Perusing through the RHEL announcements, that was from the RHSA-2022:6169-01 on 2022-08-24. Seems none of the 102.x versions have shipped:
2022-09-26 RHSA-2022:6710-01 thunderbird-102.3.0-3.el7_9.x86_64.rpm
2022-10-18 RHSA-2022:6998-01 thunderbird-102.3.0-4.el7_9.x86_64.rpm
2022-10-25 RHSA-2022:7184-01 thunderbird-102.4.0-1.el7_9.x86_64.rpm
And for completeness, just announced today:
2022-11-21 RHSA-2022:8555-01 thunderbird-102.5.0-2.el7_9.x86_64.rpm
The same seems true for firefox, which is still at firefox-91.13.0-1.el7.centos.x86_64.
Was it not updated in RHEL7?
It was, at least Oracle Linux has firefox-102.5.0-1.0.1.el7_9.src.rpm
I was already worried because firefox on CentOS7 as aged a bit...