Re: retpoline-enabled GCC build for jessie

From	Davide Prina <davide.prina@gmail.com>
Newsgroups	linux.debian.security
Subject	Re: retpoline-enabled GCC build for jessie
Date	2018-02-19 20:30 +0100
Message-ID	<vkZiq-79p-5@gated-at.bofh.it> (permalink)
References	(2 earlier) <vjdfP-1VX-9@gated-at.bofh.it> <vjsyd-3QO-9@gated-at.bofh.it> <vkaSC-7Dt-3@gated-at.bofh.it> <vkg1Y-2CK-19@gated-at.bofh.it> <vktBT-38u-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 18/02/2018 10:44, who.are.you wrote:

> On Sat, Feb 17, 2018 at 07:03:00PM +0000, Holger Levsen wrote:

>> is this gcc only useful for
>> rebuilding the kernel or would it "in theory" (and practice) be better
>> to rebuild everything with it? (of course the latter is probably not really
>> practical for Debian, but others could do it more easily.)

> Does this mean re-installing Debain is the best way to mitigate Spectre?
> If yes, would re-installing Debian from now (and onwards) be a good time to avoid Spectre vulnerabilities?

If a Debian package is recompiled then this package is a new version of 
the previous package and you get it as a Debian update. So if it is 
better to rebuild all with retpoline-enabled I think that someone in 
Debian will recompile all the packages and you get they as Debian 
update... and so you don't have to re-install Debian (or if you 
reinstall Debian you get the same system you have already... without 
retpoline-enabled, because I don't have see any package recompiled with 
that, for now).

Ciao
Davide

PS: I am I

Thread

retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-13 23:10 +0100
  Re: retpoline-enabled GCC build for jessie Fabian Grünbichler <f.gruenbichler@proxmox.com> - 2018-02-14 16:30 +0100
    Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-14 23:00 +0100
      Re: retpoline-enabled GCC build for jessie Fabian Grünbichler <f.gruenbichler@proxmox.com> - 2018-02-15 15:20 +0100
        Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-15 22:20 +0100
        Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-17 14:40 +0100
          Re: retpoline-enabled GCC build for jessie Holger Levsen <holger@layer-acht.org> - 2018-02-17 20:10 +0100
            Re: retpoline-enabled GCC build for jessie who.are.you@posteo.no - 2018-02-18 10:40 +0100
              Re: retpoline-enabled GCC build for jessie Davide Prina <davide.prina@gmail.com> - 2018-02-19 20:30 +0100
            Re: retpoline-enabled GCC build for jessie Moritz Mühlenhoff <jmm@inutil.org> - 2018-02-22 23:00 +0100

csiph-web