[bug#50698] [PATCH] WIP patches for recently-known hurd security vulnerabilities

[Maxime Devos]

Ludovic Courtès schreef op ma 04-10-2021 om 15:52 [+0200]:
> > +(define glibc/fixed
> > +  (package-with-extra-patches
> > +   glibc
> > +   (search-patches "glibc-hurd-sendmsg-SCM_CREDS.patch"
> > +                   "glibc-hurd-proc-reauth.patch")))
> 
> Instead of a replacement, which makes no sense on GNU/Linux, could you
> add a conditional phase for (hurd-target?) that applies the patches?

A replacement would be useless on GNU/Linux, but harmless.
Adding a phase (conditional on (hurd-target?)) to glibc
calling 'patch' on these patches would be possible, but would
cause a world-rebuild for GNU/Hurd (though not for GNU/Linux).

Because i586-gnu is ‘experimental and under development’
(according to (guix)GNU Distribution), I suppose the (partial)
world-rebuild is acceptable here? 

Greetings,
Maxime.

signature.asc
Description: This is a digitally signed message part