<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="http://dev1galaxy.org/extern.php?action=feed&amp;tid=6527&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / liblzma CVE-2024-3094]]></title>
		<link>http://dev1galaxy.org/viewtopic.php?id=6527</link>
		<description><![CDATA[The most recent posts in liblzma CVE-2024-3094.]]></description>
		<lastBuildDate>Mon, 29 Apr 2024 22:28:49 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49755#p49755</link>
			<description><![CDATA[<p>Hello:</p><div class="quotebox"><cite>stargate wrote:</cite><blockquote><div><p>... just stumbled across this video ...</p></div></blockquote></div><p>I came across <a href="https://www.youtube.com/watch?v=f2e4FNMzyto" rel="nofollow">this</a> more recent one.<br />Food for thought or at the very least, interesting to watch.</p><p>Best,</p><p>A.</p>]]></description>
			<author><![CDATA[dummy@example.com (Altoid)]]></author>
			<pubDate>Mon, 29 Apr 2024 22:28:49 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49755#p49755</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49752#p49752</link>
			<description><![CDATA[<div class="quotebox"><blockquote><div><p>As far as minimalism: installers should all offer it, but then everyone would complain about how long it took to install a new full DE system, and updaters would have to be rewritten for every DE.</p></div></blockquote></div><p>I was under the impression that devuan desktop install iso is for those who want desktop environment working ASAP.<br /> And netinstall is more likely for those who want a minimal system. So is there any real harm done if avahi and some other packages are made optional in netinstall?</p><p>Haven&#039;t touched Arch yet. Would like to figure out first how to make guix usable.</p>]]></description>
			<author><![CDATA[dummy@example.com (nahkhiirmees)]]></author>
			<pubDate>Mon, 29 Apr 2024 19:02:09 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49752#p49752</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49750#p49750</link>
			<description><![CDATA[<p>re: *bsd</p><p>just stumbled across this(video circa 2017):</p><p>&quot;Convincing a Linux guy to use FreeBSD&quot; - Lunduke Hour - Feb 9, 2017(approx-1hr15min)<br />ttps://www.youtube.com/watch?v=cofKxtIO3Is</p>]]></description>
			<author><![CDATA[dummy@example.com (stargate-sg1-cheyenne-mtn)]]></author>
			<pubDate>Mon, 29 Apr 2024 16:40:03 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49750#p49750</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49748#p49748</link>
			<description><![CDATA[<p>Avahi may be necessary when using wireless network. But with wired, which i prefer, it just gets in my way. And then there are some security-related-problems. <br />Especially when the default iptables_rules are &quot;-P ACCEPT&quot;<br />Although this is going off-topic.</p>]]></description>
			<author><![CDATA[dummy@example.com (nahkhiirmees)]]></author>
			<pubDate>Mon, 29 Apr 2024 13:00:47 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49748#p49748</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49746#p49746</link>
			<description><![CDATA[<div class="quotebox"><blockquote><div><p>I strongly dislike avahi</p></div></blockquote></div><p>Pretty much a modern neccessity for a lot of networking functions.</p><div class="quotebox"><blockquote><div><p>You can try the live image GhostBSD</p></div></blockquote></div><p>A good choice for people who have never run BSD. I&#039;ve been testing it for about two months now and have found no particular problems with it, at least nothing important other than the normal known imitations of BSD. I recommend it if you want to tinker with BSD.</p><p>As far as minimalism: installers should all offer it, but then everyone would complain about how long it took to install a new full DE system, and updaters would have to be rewritten for every DE. Might as well be Arch then.</p><p>For me open-box wm written with lua coded hooked display options would make for a very simple but easily customizable desktiop. Right now Linux is suffering from hardware overdose, and free software is facing a difficult choice. Will AI take over development or not. Both choices are ominous. It&#039;s hard to tell if we are going backwards or forwards.</p><p>TC</p>]]></description>
			<author><![CDATA[dummy@example.com (trinidad)]]></author>
			<pubDate>Mon, 29 Apr 2024 12:28:03 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49746#p49746</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49739#p49739</link>
			<description><![CDATA[<div class="quotebox"><blockquote><div><p>dbus, systemd, network-manager, pulseaudio, pipewire, wayland, avahi, java and their libraries being completely OPTIONAL is the only way I would think that devuan could meet that standard of what I would desire.</p></div></blockquote></div><p>For most parts, sounds like a good start. I strongly dislike avahi and networkmanager. But on the other hand i&#039;m neutral towards dbus. <br />I guess i could figure out how to make alsa work without those pulse/pipewire/whatever, if i really want to.<br />Would like to add all polkit-related packages to that list. <br />Although that is for security-reasons, not minimalism-related.</p>]]></description>
			<author><![CDATA[dummy@example.com (nahkhiirmees)]]></author>
			<pubDate>Sun, 28 Apr 2024 21:28:50 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49739#p49739</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49585#p49585</link>
			<description><![CDATA[<p>You can try the live image GhostBSD<br /><a href="https://distrowatch.com/table.php?distribution=ghostbsd" rel="nofollow">https://distrowatch.com/table.php?distribution=ghostbsd</a></p>]]></description>
			<author><![CDATA[dummy@example.com (aluma)]]></author>
			<pubDate>Sun, 21 Apr 2024 06:15:25 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49585#p49585</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49584#p49584</link>
			<description><![CDATA[<p>@steve_v btw, love your signature about GNOME. I dislike those punks too.</p><p>One problem comes to mind with Gentoo btw, cpu usage is a lot.</p><p>Unless I am mistaken and something is being missed here.</p><p>I want my computers to be more efficient and use less power and Gentoo wouldn&#039;t improve on that I don&#039;t think.</p><p>Although, OpenBSD could be the same, so idk.</p><p>Not sure how OpenBSD does power saving wise on old hardware vs new hardware.</p><p>And for that matter, architectures like ARM as well including 64 bit.</p>]]></description>
			<author><![CDATA[dummy@example.com (zapper)]]></author>
			<pubDate>Sun, 21 Apr 2024 02:08:02 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49584#p49584</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49515#p49515</link>
			<description><![CDATA[<p>The only thing that&#039;s &quot;hard&quot; about modern Gentoo is the manual chroot-and-tarball install method, and that&#039;s no more difficult than Arch. <br />After that it&#039;s really just a CPU-time tax in return for the flexibility of building software the way you want it.</p>]]></description>
			<author><![CDATA[dummy@example.com (steve_v)]]></author>
			<pubDate>Sun, 14 Apr 2024 05:36:49 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49515#p49515</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49514#p49514</link>
			<description><![CDATA[<p>@steve-v no, I don&#039;t expect you guys to do the work, its not devuan&#039;s fault. That would require the debian developers and the infectors to stop being morons and I don&#039;t see that happening.</p><p>Infectors meaning bloatware beasts like redhat.</p><p>OpenBSD and Gentoo are possibilities I suppose. I myself don&#039;t know how I would do this of course though.</p><p>Tried gentoo once,&#160; it was ultra hard.</p>]]></description>
			<author><![CDATA[dummy@example.com (zapper)]]></author>
			<pubDate>Sun, 14 Apr 2024 04:51:35 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49514#p49514</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49508#p49508</link>
			<description><![CDATA[<div class="quotebox"><cite>zapper wrote:</cite><blockquote><div><p>If I want a minimalistic system I have two choices...</p><p>OpenBSD or Hyperbola.</p></div></blockquote></div><p>... Or NixOS, Gentoo, CRUX, Gobo, FreeBSD, or any other system that provides tooling to build packages locally with the configuration you want.<br />Were you motivated enough to do so, this can also be achieved with Debian/Devuan... It&#039;s just a bunch more work as the packaging tools don&#039;t really cater to global feature switches the way e.g. Gentoo USE flags or the nixpkg declarative build system do.</p><p>What you&#039;re <em>really</em> asking for appears to be a binary distribution where all the configuration and packaging work is done for you, yet the choices the maintainers make are precisely aligned with your preferences... That&#039;s not going to happen, regardless of how much you complain about it.</p><p>You want the Devuan developers and maintainers to fork and rebuild everything to run without $things_you_dislike, yet you&#039;re not even willing to properly define what you want or what would be needed to achieve it? <br />Not to put too fine a point on things: Get off the grass. <img src="http://dev1galaxy.org/img/smilies/roll.png" width="15" height="15" alt="roll" /></p>]]></description>
			<author><![CDATA[dummy@example.com (steve_v)]]></author>
			<pubDate>Sat, 13 Apr 2024 09:13:57 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49508#p49508</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49505#p49505</link>
			<description><![CDATA[<p>@ralph.ronnquist</p><p>dbus, systemd, network-manager, pulseaudio, pipewire, wayland, avahi, java and their libraries being completely OPTIONAL is the only way I would think that devuan could meet that standard of what I would desire.</p><p>Aka, not needing those packages + their libraries would be my criteria. </p><p>If that cannot be reached, then it is mostly futile. </p><p>As for specific packages, those are the system ones that prevent a minimal devuan install but specifically which are okay in my book?</p><p>I cannot say completely, because I would have to wade through devuan to find them. It would be very tricky to specify them all given Devuan has 50K+ packages.</p><p>Probably less than 10K of them would fit my bill. </p><p>In any case, I am not sure what you meant by meeting a minimal system design.</p><p>My criteria are probably impossible for devuan unless signifiant changes were made.</p><p>And no i don&#039;t expect them to be met. This isn&#039;t for the faint of heart after all. </p><p><img src="http://dev1galaxy.org/img/smilies/wink.png" width="15" height="15" alt="wink" /></p>]]></description>
			<author><![CDATA[dummy@example.com (zapper)]]></author>
			<pubDate>Sat, 13 Apr 2024 00:11:30 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49505#p49505</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49503#p49503</link>
			<description><![CDATA[<p>Hey @zapper, a <span class="bbu">positive</span> action on this forum would have been to propose the hands-on and/or package list to use from the Devuan repositories in order to have that &quot;minimalistic system&quot;.</p><p>As you know, there is no single &quot;Devuan System&quot; as Devuan is a repository of packages that includes all Debian packages except those that are or relies on systemd; it is your choice.</p>]]></description>
			<author><![CDATA[dummy@example.com (ralph.ronnquist)]]></author>
			<pubDate>Fri, 12 Apr 2024 22:13:06 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49503#p49503</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49499#p49499</link>
			<description><![CDATA[<p>If I want a minimalistic system I have two choices...</p><p>OpenBSD or Hyperbola.</p><p>All the others don&#039;t seem minimal enough.</p><p>Devuan is not minimal enough, but I will definitely use it for ARM64 since Hyperbola don&#039;t support it.</p>]]></description>
			<author><![CDATA[dummy@example.com (zapper)]]></author>
			<pubDate>Fri, 12 Apr 2024 16:54:06 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49499#p49499</guid>
		</item>
		<item>
			<title><![CDATA[Re: liblzma CVE-2024-3094]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=49448#p49448</link>
			<description><![CDATA[<div class="quotebox"><cite>nahkhiirmees wrote:</cite><blockquote><div><p>Maybe moving on to Alpine becomes a good idea.</p></div></blockquote></div><p>I think it&#039;s worth considering. At the very least, you could install Alpine in a VM in order to become more familiar with it. That&#039;s what I&#039;m planning to do. Even if I don&#039;t use it as my main OS, I may still use it for some other purpose.</p>]]></description>
			<author><![CDATA[dummy@example.com (pcalvert)]]></author>
			<pubDate>Mon, 08 Apr 2024 16:08:25 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=49448#p49448</guid>
		</item>
	</channel>
</rss>
