From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: linux-libre@4.1 lacks Stack Clash mitigation; reaches EOL soon Date: Wed, 28 Jun 2017 01:05:01 -0400 Message-ID: <878tkcg0si.fsf@netris.org> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58048) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dQ5AD-0004vu-5x for guix-devel@gnu.org; Wed, 28 Jun 2017 01:05:17 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dQ5AA-0006PH-3A for guix-devel@gnu.org; Wed, 28 Jun 2017 01:05:17 -0400 Received: from world.peace.net ([50.252.239.5]:57840) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dQ5A9-0006Ox-W1 for guix-devel@gnu.org; Wed, 28 Jun 2017 01:05:14 -0400 List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org Users of linux-libre@4.1 should take notice: I've been unable to find backported patches for CVE-2017-1000364 (Stack Clash mitigation) for linux-4.1. Also, upstream support for that kernel version will reach end-of-life in about a month, so you should plan to migrate to another kernel version soon. Mark