Re: retpoline-enabled GCC build for jessie

From	Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups	linux.debian.security
Subject	Re: retpoline-enabled GCC build for jessie
Date	2018-02-22 23:00 +0100
Message-ID	<vm74e-2gM-11@gated-at.bofh.it> (permalink)
References	(1 earlier) <vj7ap-6vf-1@gated-at.bofh.it> <vjdfP-1VX-9@gated-at.bofh.it> <vjsyd-3QO-9@gated-at.bofh.it> <vkaSC-7Dt-3@gated-at.bofh.it> <vkg1Y-2CK-19@gated-at.bofh.it>
Organization	Cocytus

Show all headers | View raw

Moin,

Holger Levsen <holger@layer-acht.org> schrieb:
> I have a stupid/uninformed question: is this gcc only useful for
> rebuilding the kernel or would it "in theory" (and practice) be better
> to rebuild everything with it? (of course the latter is probably not really
> practical for Debian, but others could do it more easily.)

The immediate specific need for the GCC update in oldstable and stable
is the Linux kernel, there are no plans to rebuild other packages in
released distributions at this point.

We might add this to the dpkg-buildflags default flags for buster
as a generic hardening measure, but that requires additional
work/consideration/discussion. Fortunately the buster freeze is
still quite some time away, so we're in the comfortable position
to evaluate without time pressure.

Cheers,
        Moritz

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-13 23:10 +0100
  Re: retpoline-enabled GCC build for jessie Fabian Grünbichler <f.gruenbichler@proxmox.com> - 2018-02-14 16:30 +0100
    Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-14 23:00 +0100
      Re: retpoline-enabled GCC build for jessie Fabian Grünbichler <f.gruenbichler@proxmox.com> - 2018-02-15 15:20 +0100
        Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-15 22:20 +0100
        Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-17 14:40 +0100
          Re: retpoline-enabled GCC build for jessie Holger Levsen <holger@layer-acht.org> - 2018-02-17 20:10 +0100
            Re: retpoline-enabled GCC build for jessie who.are.you@posteo.no - 2018-02-18 10:40 +0100
              Re: retpoline-enabled GCC build for jessie Davide Prina <davide.prina@gmail.com> - 2018-02-19 20:30 +0100
            Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-22 23:00 +0100

csiph-web