[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Any objections to removing address@hidden

From: Ricardo Wurmus
Subject: Re: Any objections to removing address@hidden
Date: Thu, 08 Jun 2017 16:33:24 +0200
User-agent: mu4e 0.9.18; emacs 25.2.1

Mark H Weaver <address@hidden> writes:

> Does anyone here still need address@hidden in Guix?  If not, I'd like
> to remove it.

Is this not the only version of Linux libre that does not expose the
system clock bug Libreboot users suffer from?

I’m still using 4.1 on one of my machines for that reason until I can
upgrade Libreboot.

> Upstream security updates for it seem to be quite infrequent (2.5 months
> between the last two releases), and the recent update to 4.1.40
> neglected to include a fix for CVE-2017-6074, which does not inspire
> confidence.

Indeed.  Thank you for checking.

> What do you think?

It would be nice if it turned out that I’m wrong about 4.1 being needed
for older versions of Libreboot.  That’s my only objection to removing
it, but since that can be fixed by upgrading to a more recent Libreboot
(although that may be messy) I think it’s okay to remove it.


GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC

reply via email to

[Prev in Thread] Current Thread [Next in Thread]