02:14.35 | *** join/#oe khem (~khem@unaffiliated/khem) |
02:23.41 | *** join/#oe NU-Slacker (~NU-Slacke@24.13.72.71) |
02:39.37 | *** join/#oe ankit (~apnavik@192.55.54.38) |
03:06.41 | *** join/#oe pd09041999 (~pd0904199@14.139.61.130) |
03:06.48 | *** join/#oe pd_09041999 (~pd0904199@14.139.61.130) |
03:24.01 | *** join/#oe NU-Slacker (~NU-Slacke@24.13.72.71) |
05:00.01 | *** join/#oe pd09041999 (~pd0904199@14.139.61.130) |
05:23.17 | *** join/#oe pd09041999 (~pd0904199@14.139.61.130) |
05:52.10 | *** join/#oe thaytan (~thaytan@121-200-23-18.79c817.syd.nbn.aussiebb.net) |
06:25.05 | *** join/#oe AndersD (~AndersD@194.237.220.218) |
06:53.44 | *** join/#oe AndersD (~AndersD@194-237-220-218.customer.telia.com) |
06:54.20 | *** join/#oe JaMa (~martin@217.30.68.212) |
07:01.12 | *** join/#oe yegorich (~yegorich@mail.visionsystems.de) |
07:27.38 | *** join/#oe florian_kc (~florian_k@Maemo/community/contributor/florian) |
07:29.08 | *** join/#oe frsc (~frsc@200116b824e25400f2e1a7f721ea0c35.dip.versatel-1u1.de) |
07:49.04 | *** join/#oe Leatherface (~leatherfa@2001:470:dd7d::10) |
07:54.10 | *** join/#oe ao2 (~ao2@host9-28-dynamic.51-82-r.retail.telecomitalia.it) |
07:55.21 | *** join/#oe rob_w (~bob@unaffiliated/rob-w/x-1112029) |
07:58.49 | *** join/#oe rob_w (~bob@unaffiliated/rob-w/x-1112029) |
07:59.24 | *** join/#oe AndersD_ (~AndersD@194-237-220-218.customer.telia.com) |
08:31.37 | *** join/#oe tnovotny (~tnovotny@nat8.vcit.vutbr.net) |
08:56.29 | *** join/#oe Bunio_FH (~bunio@81-18-201-214.static.chello.pl) |
09:00.24 | *** join/#oe bluelightning_ (~paul@pdpc/supporter/professional/bluelightning) |
09:27.05 | *** join/#oe leon-anavi (~Leon@78.130.245.88) |
09:51.18 | *** join/#oe florian (~florian_k@Maemo/community/contributor/florian) |
09:51.42 | *** join/#oe dv_ (~dv@62.178.50.190) |
10:36.40 | *** join/#oe awe00 (~awe00@unaffiliated/awe00) |
10:48.22 | *** join/#oe rburton (~rburton@35.106.2.81.in-addr.arpa) |
10:57.11 | *** join/#oe sk_tandt (~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it) |
11:36.18 | *** join/#oe berton (~berton@177.194.204.148) |
11:42.38 | *** join/#oe berton (~berton@177.194.204.148) |
11:46.56 | *** join/#oe ldnunes (~ldnunes_@177.194.204.148) |
12:34.01 | *** join/#oe Bunio_FH (~bunio@81-18-201-214.static.chello.pl) |
12:56.43 | *** join/#oe JaMa (~martin@217.30.68.212) |
13:26.40 | *** join/#oe florian_kc (~florian_k@Maemo/community/contributor/florian) |
13:41.09 | *** join/#oe JaMa (~martin@217.30.68.212) |
15:23.31 | *** join/#oe frsc (~frsc@200116b82403cc00b8c3dd86e1005ca5.dip.versatel-1u1.de) |
15:26.37 | *** join/#oe pd09041999 (~pd0904199@14.139.61.130) |
15:49.15 | *** join/#oe florian_kc (~florian_k@Maemo/community/contributor/florian) |
16:01.29 | georgem | I was thinking about cherry picking CVE patches and possibly memory leak patches for systemd in sumo from here: https://github.com/systemd/systemd-stable/commits/v237-stable and sending them to the list. Would that be well received? |
16:01.41 | rburton | yes |
16:04.45 | *** join/#oe ensc|w (~ensc@fedora/ensc) |
16:45.16 | *** join/#oe rcw (~rcw@128.224.252.2) |
17:01.41 | *** join/#oe pd09041999 (~pd0904199@14.139.61.130) |
17:24.20 | *** join/#oe hrw (~hrw@redhat/hrw) |
17:56.18 | georgem | Ubuntu seems to have a more complete set of CVE fixes for 237 here: https://packages.ubuntu.com/bionic/systemd I don't see the two memory leak commits that were in v237-stable but maybe they weren't needed. I'll just use the Ubuntu CVE patches and send that to the list for sumo assuming I don't run into any problems. |
18:22.29 | armpit | georgem, do they affect the version in thud? |
18:33.01 | georgem | armpit: it appears there are 9 patches for v239 (thud) and 10 for v237 (sumo), however it appears systemd in thud has 6 CVE patches already applied on top of it. Might be a bit of mess to sort that out... |
18:35.10 | armpit | k |
18:36.25 | georgem | Ubuntu has multiple patches for some of the CVEs and without digging further it's not immediately clear whether thud is missing some of them or just has all the changes for certain CVEs combined into a single patch. |
18:40.20 | georgem | For CVE-2018-16865 they seem to be combined into a single patch in Thud. |
18:49.18 | georgem | Thud is missing CVE-2019-6454 and it might be missing the second patch for CVE-2018-6954. Let me start by seeing if the patches already in Thud apply cleanly to v237 in sumo. If so I'll build that, make sure systemd still works on my target and send those to the list. |
18:49.34 | *** join/#oe florian_kc (~florian_k@Maemo/community/contributor/florian) |
19:04.39 | *** join/#oe bluelightning (~paul@pdpc/supporter/professional/bluelightning) |
19:12.39 | *** join/#oe florian_kc (~florian_k@Maemo/community/contributor/florian) |
19:19.14 | *** join/#oe bluelightning (~paul@pdpc/supporter/professional/bluelightning) |
19:48.37 | *** join/#oe dqx_ (~dqx@unaffiliated/dqx) |
19:53.19 | *** join/#oe awe00 (~awe00@unaffiliated/awe00) |
20:01.04 | *** join/#oe balkamos (balkamos@unaffiliated/motley) |
20:55.50 | *** join/#oe ao2 (~ao2@host9-28-dynamic.51-82-r.retail.telecomitalia.it) |
21:10.37 | *** join/#oe stephano (stephano@nat/intel/x-bvshisuwiueafpkp) |
22:43.30 | *** join/#oe georgem_home (uid210681@gateway/web/irccloud.com/x-ijyykoscqdjvpycq) |