Changeset b0a6b0c for chapter03/packages.xml

Timestamp:

02/25/2022 04:10:04 AM (2 years ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, arm, bdubbs/gcc13, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

460f575, 9c12b93, cbd0a9a

Parents:

ba2dc1b

Message:

mention that expat may delete vulnerable releases

File:

• chapter03/packages.xml (modified) (1 diff)

chapter03/packages.xml

@@ -174 +174 @@
         <para>Download: <ulink url="&expat-url;"/></para>
         <para>MD5 sum: <literal>&expat-md5;</literal></para>
+        <note>
+          <para>The upstream may remove tarballs of the specific releases of
+          <application>Expat</application> when these releases contain a
+          security vulnerability.  You should refer to
+          <ulink url='&lfs-root;lfs/advisories/'>LFS security advisories</ulink>
+          to figure out which version (with the vulnerability fixed) should
+          be used.  You may download the vulnerable version from a mirror,
+          but it's not recommended.</para>
+        </note>
       </listitem>
     </varlistentry>