Re: glibc update

2016-02-22 Thread Leo Famulari
On Mon, Feb 22, 2016 at 03:32:09PM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > > On Wed, Feb 17, 2016 at 09:10:12PM +1100, Jookia wrote: > >> On Wed, Feb 17, 2016 at 10:10:14AM +0100, Andy Wingo wrote: > >> > Given that seriousness of this bug and the amount of time that a full > >>

Re: glibc update

2016-02-22 Thread Ludovic Courtès
Leo Famulari skribis: > On Wed, Feb 17, 2016 at 09:10:12PM +1100, Jookia wrote: >> On Wed, Feb 17, 2016 at 10:10:14AM +0100, Andy Wingo wrote: >> > Given that seriousness of this bug and the amount of time that a full >> > rebuild will take, does anyone have a graft recipe they would like to >> >

Security warnings (was Re: glibc update)

2016-02-17 Thread Pjotr Prins
ail.com> > Sent: February 17, 2016 11:28:33 AM EST > To: Leo Famulari > Cc: guix-devel@gnu.org > Subject: Re: glibc update > > On Wed, Feb 17, 2016 at 11:14:19AM -0500, Leo Famulari wrote: > > I tried this. The resulting process downloaded the bootstrap binaries > &

Re: glibc update

2016-02-17 Thread Leo Famulari
.com> Sent: February 17, 2016 11:28:33 AM EST To: Leo Famulari Cc: guix-devel@gnu.org Subject: Re: glibc update On Wed, Feb 17, 2016 at 11:14:19AM -0500, Leo Famulari wrote: > I tried this. The resulting process downloaded the bootstrap binaries > and appeared to rebuild *everything*. I haven

Re: glibc update

2016-02-17 Thread Jookia
On Wed, Feb 17, 2016 at 11:14:19AM -0500, Leo Famulari wrote: > I tried this. The resulting process downloaded the bootstrap binaries > and appeared to rebuild *everything*. I haven't had time to figure out > what actually got rebuilt and if anything is still using the vulnerable > glibc. This doe

Re: glibc update

2016-02-17 Thread Leo Famulari
On Tue, Feb 16, 2016 at 03:20:10PM -0500, Leo Famulari wrote: > I'm wondering if anyone has rebuilt their local systems based on the > glibc update in security updates? I'm wondering what is the best way to > achieve this? > > For Guix users, something like this? > > $ git checkout master \ > &&

Re: glibc update

2016-02-17 Thread Leo Famulari
On Wed, Feb 17, 2016 at 09:10:12PM +1100, Jookia wrote: > On Wed, Feb 17, 2016 at 10:10:14AM +0100, Andy Wingo wrote: > > Given that seriousness of this bug and the amount of time that a full > > rebuild will take, does anyone have a graft recipe they would like to > > share? > > Not really, unfor

Re: glibc update

2016-02-17 Thread Jookia
On Wed, Feb 17, 2016 at 10:10:14AM +0100, Andy Wingo wrote: > Given that seriousness of this bug and the amount of time that a full > rebuild will take, does anyone have a graft recipe they would like to > share? Not really, unfortunately grafts are broken right now. I'm not sure how high a priori

Re: glibc update

2016-02-17 Thread Andy Wingo
On Tue 16 Feb 2016 21:20, Leo Famulari writes: > I'm wondering if anyone has rebuilt their local systems based on the > glibc update in security updates? I'm wondering what is the best way to > achieve this? > > For Guix users, something like this? > > $ git checkout master \ > && git checkout -b