From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Any objections to removing linux-libre@4.1? Date: Sun, 4 Jun 2017 12:31:30 -0400 Message-ID: <20170604163130.GA14880@jasmine> References: <87wp8suvs4.fsf@netris.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="GvXjxJ+pjyke8COw" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41588) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dHYRL-0007VN-N6 for guix-devel@gnu.org; Sun, 04 Jun 2017 12:31:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dHYRH-000327-Lw for guix-devel@gnu.org; Sun, 04 Jun 2017 12:31:43 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:44071) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dHYRE-0002yU-Ae for guix-devel@gnu.org; Sun, 04 Jun 2017 12:31:39 -0400 Content-Disposition: inline In-Reply-To: <87wp8suvs4.fsf@netris.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Mark H Weaver Cc: guix-devel@gnu.org --GvXjxJ+pjyke8COw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jun 04, 2017 at 02:11:39AM -0400, Mark H Weaver wrote: > Does anyone here still need linux-libre@4.1 in Guix? If not, I'd like > to remove it. >=20 > Upstream security updates for it seem to be quite infrequent (2.5 months > between the last two releases), and the recent update to 4.1.40 > neglected to include a fix for CVE-2017-6074, which does not inspire > confidence. >=20 > What do you think? I don't have a strong objection. If somebody needs this particular Linux re= lease series later, it will not be difficult for them to recreate. On the other hand, the 4.1 series has been selected for the Linux Foundatio= n's Long Term Support Initiative. This program will support Linux releases for longer than usual, so 4.1 will be in use for longer than most of the Linux = LTS releases. Besides, kernel bugs are not rare. More will be found and disclosed, and so= me will be found and kept private :/ I recommend waiting a few days for more comments. IIRC, we kept this partic= ular series to work around some bugs related to GuixSD and Libreboot. So, there = were some people using it. I'd hate to "strand" existing users who might not not= ice that they are not receiving updates to the 'linux-4.1' package they've spec= ified in their GuixSD configuration. If Hydra resources are a concern, perhaps we could keep the package but not build it. --GvXjxJ+pjyke8COw Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlk0Nd4ACgkQJkb6MLrK fwheVRAA6n2beDKPuU5t9YDZHi15hBG59Et/bSQfy9oEDCGtW2vMGpAF+ud522mo Zu3TaHxrhFt9JkxHfW62Y1jcsCu8uZf3G7iWaRlNmCLN+avNcn6JSTlfhtOTDsoI MH20D2Mvp1e/hhFg5Wl0VCB+PBLkvR/p67oCGm+CSJlNd6BceLZC440RyzFTbeFr artwHshlHnPt80KX4h0N/ASFOZE9ftBBLw9aBVY8XGCvuwFs8ODxFA9CWfFqrbRJ iW2bNPIJw8nK3WACBev49aBVIRZtUcyosMdksBNj3ypTzqyFLwRbz6GuolTX6e+l 9dbxUP0CeIbONOfeqIbsG5oykXlJisOXh0d4T193NOrQLEi/no4t5bgB0OuPgn+n wUAgTOl2W1I9NWlEVqYNU8ieH2ot25eI2sj6nrKpNr5mQDKl6fnEoEmCQdmXGC+v QiSWF/YBjvgi/QctwkCa/5oakpkl5JdgC8QX8Yq6PT6a70m9dM6DMVkY9QhLMS0V a8KVpzLeRkiv7V5GkeuznfKBs78oJ9H9+3aeljQ4FWAid0j0+uPjWbkMYrUgd4lW vlV5eky/a9MA7X+X7Bh8JwEW7kQ+0kKx1NDYZgwOcL8AaAJLDHp0cs4gf3HF7uiE SjthDUneTOUd4MPUNw9nQKQclDEu8QwzYBTloZb1+m4WyAPL+aE= =A/W0 -----END PGP SIGNATURE----- --GvXjxJ+pjyke8COw--