[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 0/1] Dbus update 1.10.12 for core-updates
From: |
Ludovic Courtès |
Subject: |
Re: [PATCH 0/1] Dbus update 1.10.12 for core-updates |
Date: |
Thu, 13 Oct 2016 22:19:56 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux) |
Leo Famulari <address@hidden> skribis:
> On Mon, Oct 10, 2016 at 10:57:47PM +0200, Ludovic Courtès wrote:
>> Yeah, seems hard to exploit. Apparently even if we’re not using systemd
>> activations we could be vulnerable, because it’s about how specific
>> messages are processed, IIUC.
>>
>> > What do you think? Should we update this on core-updates?
>>
>> I think so.
>
> Okay. Just to clarify, this will trigger >1000 rebuilds.
Well the answer was valid on Oct. 10th ;-), but at this point of the
build progress I agree that it’s kinda problematic would probably
recommend grafting.
What are your thoughts?
>>
>> > Should we graft it on master?
>>
>> Unless there are possible ABI incompatibilies, it probably doesn’t hurt
>> to do that.
>
> According to the dbus README, the offer a stable ABI within each stable
> release series:
>
> https://dbus.freedesktop.org/doc/README
>
> But, I found that the regular approach to grafting does not work for our
> dbus package. Presumably, it's because (gnu packages glib) exports dbus
> before defining it.
The #:export at the top shouldn’t make any difference. In what way does
it not work? :-)
Could it be an instance of <http://bugs.gnu.org/24418>?
Ludo’.