IRC Logs for #crux-devel Monday, 2017-06-19

*** onodera has quit IRC02:03
*** _________mavric6 has quit IRC02:38
*** _________mavric6 has joined #crux-devel02:39
*** chinarulezzz has quit IRC04:05
*** chinarulezzz has joined #crux-devel07:44
*** chinarulezzz has quit IRC13:49
*** heroux has quit IRC14:30
*** heroux has joined #crux-devel14:30
*** onodera has joined #crux-devel15:20
frinnstman, scp'ing all of crux's repos and files was a dumb idea15:37
frinnsttar ftw15:37
frinnst.footprint                                                                                                      100% 8546    99.8KB/s   00:0015:37
frinnst.md5sum                                                                                                         100%   52     0.8KB/s   00:0015:37
frinnst.signature                                                                                                      100%  420     6.5KB/s   00:0015:37
frinnstPkgfile                                                                                                         100%  429     6.7KB/s   00:0015:37
frinnst.joy15:38
*** frinnst has quit IRC15:44
*** frinnst has joined #crux-devel15:45
*** frinnst has quit IRC15:45
*** frinnst has joined #crux-devel15:45
frinnstwonder if its freenode or my ipv6 tunnel15:48
frinnsthm, debian just patched glibc for CVE-2017-100036616:06
frinnst- a local-root exploit against Sudo (CVE-2017-1000367, CVE-2017-1000366)16:07
frinnst  on i386 Debian, Ubuntu, CentOS;16:07
frinnst- a local-root exploit against ld.so and most SUID-root binaries16:07
frinnst  (CVE-2017-1000366, CVE-2017-1000370) on i386 Debian, Fedora, CentOS;16:07
frinnst- a local-root exploit against ld.so and most SUID-root PIEs16:07
frinnst  (CVE-2017-1000366, CVE-2017-1000371) on i386 Debian, Ubuntu, Fedora;16:07
frinnsthttps://sourceware.org/git/?p=glibc.git;a=shortlog;h=refs/heads/release/2.24/master seems to still be pretty active with backports16:09
frinnsthttps://planet-express.se/crux/ports/glibc/glibc-2.24-updates.patch includes all changes from the tag up till today16:09
frinnstbut not for CVE-2017-100036616:28
frinnsthttps://planet-express.se/crux/ports/glibc/cvs-malloc-hardening.diff16:29
*** frinnst has quit IRC16:42
*** frinnst_ has joined #crux-devel16:42
nomiusRomster: have you build mesa3d already?17:44
juefrinnst: indeed, lot of changes, do you have the time to prepare an updated port?17:56
jueah, I see a port in your private repo :)17:58
juethanks, will try do test it tomorrow17:58
jues/do/to17:58
*** onodera has quit IRC18:03
frinnstyeah im testing it now too18:03
*** onodera has joined #crux-devel18:03
frinnstwe could cherry-pick the two CVE's covered in the patches but i thought "what the hell"18:04
*** darfo has quit IRC18:19
*** groovy2shoes has quit IRC18:19
*** darfo has joined #crux-devel18:21
*** groovy2shoes has joined #crux-devel18:25
*** dlcusa has left #crux-devel ("Leaving")18:37
frinnstjaeger, Romster - feel free to test18:45
*** chinarulezzz has joined #crux-devel19:13
*** Romster has quit IRC21:21
*** nomius has quit IRC21:21
*** nomius has joined #crux-devel21:21
*** Romster has joined #crux-devel21:22
*** dlcusa has joined #crux-devel21:30
Romsternomius, actually i did ebfore i slept, i just uploaded those packages.22:49
Romsterbefore*22:51
Romsteri'll after work frinnst22:51
frinnstIm confident it's fine, but the more tests the better22:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!