On 11/30/22 11:41, Chris Schanzle via CentOS-devel wrote: > Thanks for the reference, Simon. [tl;dr: delays due to CentOS folks > repeating tremendous effort RH already solved.] While I am grateful for > everyone's time and efforts, it is hard to understand why there isn't > more technology transfer within RH to the CentOS folks if they're one > big happy family. And disappointing there is no communication on this > issue here. > > With vulnerable internet-interacting apps like Thunderbird and Firefox > (possibly others), IMHO CentOS 7 is unsafe for general use. Effectively > EOL. I'm sad, but no time for self pity when there's work to replace > the OS on our systems... > > Thank you, CentOS team. Incredible success for many years - I've > enjoyed the ride with you. > These (firefox and thunderbird) are now released. Regardless, these things still need to be built in the CentOS Infrastructure. Just FYI, i had to bootstrap all of the following to make this work: rust-1.54 rust-1.58 rust-1.62 devtoolset-12 llvm-toolset-12.0 llvm-toolset-13.0 llvm-toolset-14.0 Many of these items needed to be combined together in different buildroots to get different library links. I also provided the required source packages to other people so they could build this as well since not all the things required to build Firefox/Thunderbird are part of the distribution. The real bottom line here is that this was not easy to do. It requires MANY things that are newer than the items released in EL7. But once built, it still needs to run on the items included in EL7. This was much easier to do in both CentOS Stream 8 and CentOS Stream 9 as the toolsets are all part of those distribution. They are not part of the RHEL 7 (so also not part of CentOS Linux 7). Thanks, Johnny Hughes > > On 11/30/22 3:45 AM, Simon Matter wrote: >> OK, this is a known issue as seen here: >> >> https://forums.centos.org/viewtopic.php?f=51&t=79706 >> >> Seems then that all users of CentOS 7 are at risk if they are using >> Firefox or Thunderbird on it. >> >> And that's for three months now. Not good. >> >> Dear Red Hat, how can you left us in the rain that way? >> >> Regards, >> Simon >> >>>> Hi Chris, >>>> >>>>> [No response on CentOS list, so trying CentOS-devel.] >>>>> >>>>> >>>>> >>>>> -------- Forwarded Message -------- >>>>> Subject: [CentOS] CentOS 7: Missing Thunderbird Updates >>>>> Date: Mon, 21 Nov 2022 15:33:56 -0500 >>>>> From: Chris Schanzle via CentOS <centos at centos.org> >>>>> Reply-To: Chris Schanzle <christopher.schanzle at nist.gov>, CentOS >>>>> mailing >>>>> list <centos at centos.org> >>>>> To: CentOS mailing list <centos at centos.org> >>>>> >>>>> >>>>> >>>>> Hi, >>>>> >>>>> Looks like CentOS 7 hasn't shipped Thunderbird updates for a while. >>>>> The >>>>> latest I see in repos is: >>>>> >>>>> Sep 1 15:22 thunderbird-91.13.0-1.el7.centos.x86_64.rpm >>>>> >>>>> Perusing through the RHEL announcements, that was from the >>>>> RHSA-2022:6169-01 on 2022-08-24. Seems none of the 102.x versions >>>>> have >>>>> shipped: >>>>> >>>>> 2022-09-26 RHSA-2022:6710-01 thunderbird-102.3.0-3.el7_9.x86_64.rpm >>>>> >>>>> 2022-10-18 RHSA-2022:6998-01 thunderbird-102.3.0-4.el7_9.x86_64.rpm >>>>> >>>>> 2022-10-25 RHSA-2022:7184-01 thunderbird-102.4.0-1.el7_9.x86_64.rpm >>>>> >>>>> >>>>> And for completeness, just announced today: >>>>> >>>>> 2022-11-21 RHSA-2022:8555-01 thunderbird-102.5.0-2.el7_9.x86_64.rpm >>>>> >>>> The same seems true for firefox, which is still at >>>> firefox-91.13.0-1.el7.centos.x86_64. >>>> >>>> Was it not updated in RHEL7? >>> It was, at least Oracle Linux has firefox-102.5.0-1.0.1.el7_9.src.rpm >>> >>> I was already worried because firefox on CentOS7 as aged a bit... >>>