Thread: Idea: N900 security update (openssl, browser etc)
View Single Post
bencoh is offline bencoh
2015-11-04 , 20:18
Posts: 23 | Thanked: 69 times | Joined on Nov 2014
#15
Originally Posted by szopin View Post
This would mean updating the whole system, no?
Critical glibc bugs:
https://rhn.redhat.com/errata/RHSA-2015-0090.html
https://rhn.redhat.com/errata/RHSA-2015-0092.html
...
Last time ppl tried using latest libc/glibc builds from debian random apps would break (calendar etc)
If you're referring to the so-called GHOST glibc bug (https://www.redhat.com/security/data...2015-0235.html), it has been patched in cssu-testing:
http://wiki.maemo.org/Community_SSU/Changelog#Tmaemo11

I guess this one should go in next cssu-stable if nobody reported any issue (?).
But others security issues might still be hiding in our not-so-young glibc, and it looks like we're still forced to backport patches instead of upgrading.
 

The Following 7 Users Say Thank You to bencoh For This Useful Post: