[pLog-svn] r6088 - plog/branches/lifetype-1.2/class/security
plogworld at jon.limedaley.com
Wed Jan 2 15:54:48 EST 2008
On Wed, 2 Jan 2008, Andy wrote:
> I was using a 1.1.x version that I was perfectly happy with and wanted to
> maintain. I bitched about it in a blog post:
> Please don't take it harshly.
I am not sure if there is a way to take it non-harshly...
We have fixed all security issues that we know of in 1.1, and I think 1.0.
We didn't backport them to 0.3.2.
Oscar probably humorously put in the note about the "feel free to
drop in a donation if you want support", since I think the project has
received less than $100 since its inception. You can't expect life-long
support for free - I wouldn't expect that from anything, and if you do,
you probably don't want to stay with LifeType, as you won't end up happy
with us, I think.
Another note on your blog about centos being "supported" for seven
years. What they mean is, we promise not to change anything for years,
and if you want to run newer versions of software to get features, bug
fixes and/or security fixes, good luck. I would not advise running centos
on a system that you want to be able to stay up-to-date with *any*
packages. The company I do some contracting work for picked centos a
while back and are now having huge difficulties in getting versions of
various things to be current, and are hand-compiling different packages,
since centos doesn't support them.
More information about the pLog-svn