IRC Logs for #crux-devel Wednesday, 2010-12-22

*** mike_k has joined #crux-devel01:59
*** pitillo has quit IRC02:29
*** pitillo has joined #crux-devel02:33
*** mike_k_ has joined #crux-devel02:54
*** mike_k has quit IRC02:57
*** mike_k has joined #crux-devel03:12
*** mike_k_ has quit IRC03:14
*** mike_k_ has joined #crux-devel03:16
*** mike_k has quit IRC03:16
*** mike_k_ has quit IRC03:25
*** mike_k_ has joined #crux-devel03:26
*** mike_k has joined #crux-devel03:45
*** mike_k_ has quit IRC03:45
*** acrux has joined #crux-devel04:33
*** mike_k_ has joined #crux-devel04:37
*** mike_k has quit IRC04:39
*** mike_k has joined #crux-devel04:41
*** mike_k_ has quit IRC04:44
*** mike_k has quit IRC05:02
*** mike_k has joined #crux-devel05:04
*** mike_k has quit IRC05:11
*** mike_k has joined #crux-devel05:25
*** mike_k has quit IRC05:45
*** mike_k has joined #crux-devel05:56
*** mike_k has quit IRC06:09
*** mike_k_ has joined #crux-devel06:09
*** mike_k_ has quit IRC06:18
*** mike_k_ has joined #crux-devel06:31
*** mike_k has joined #crux-devel06:36
*** mike_k_ has quit IRC06:38
*** jue has joined #crux-devel07:39
juewrt glibc update:07:43
juenot sure if we should include the patch 'discussed' in the following thread of libc-hacker07:45
juehttp://sourceware.org/ml/libc-hacker/2010-12/msg00001.html07:45
juethe patch is applied to the fedora-2.12 branch of glibc, but as you can see not in master and therefore not in 2.12.207:46
jueit's a new attempt for http://seclists.org/fulldisclosure/2010/Oct/25707:47
juecomments or opinions ?07:48
tilmanif it's in fedora it's probably safe to apply it07:49
jueyou've read Dreppers replies?07:50
tilmanno07:50
tilmanawesoe07:51
tilmanawesome07:51
jueit's a nice example how harmonic glibc development works ;)07:51
juebut at all I think the point against the patch is not really relevant for us?07:56
tilmanprobably not07:57
tilmani don't think ORIGIN is used much07:57
jueok, looks like we agree to apply the patch?07:58
tilmanyes :)07:58
tilmanit already is applied in your port, right?07:58
tilmanoh, apparently it's not07:59
juebut now it is08:00
*** acrux has quit IRC08:09
*** acrux has joined #crux-devel08:11
juetilman: you'll update to the new version?08:12
tilmanyep08:13
frinnstpushing glibc & gcc today?08:17
jueI'd say earliest tomorrow08:24
juefrinnst: you've been running both without issues?08:29
pitillojue: here I have both running, it's building glibc-r2 since some minutes ago (I really don't understand right how the ORIGIN discussion can affect CRUX, not enought knowledge to understand)08:34
juepitillo: http://seclists.org/fulldisclosure/2010/Oct/257 is well documented, even though the exploit doesn't work for me to gain root access, but my shell got killed08:41
jueanyway, has to run now, bbl08:43
pitilloyes, I tried to understand following it some time ago. I readed your last link too after making the upgrade (checking the patch) but really I'm not sure how it could affect CRUX. May be reading it slowly and paying more attention on the thread (making some tests) could be good too08:43
pitillobbl08:44
*** acrux has quit IRC09:18
*** acrux has joined #crux-devel09:22
frinnstjue: yes10:40
*** mike_k has quit IRC15:55
*** jue has quit IRC16:49
*** mavrick61 has quit IRC21:26
*** mavrick61 has joined #crux-devel21:27

Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!