Rare project developers

[mc36 <>]

hi,

On 7/22/22 14:06, Alexander Gall wrote:
> On Fri, 22 Jul 2022 10:47:08 +0200, mc36 <> said:
>
> > so for example, above the previously discussed kernel issues from the past 
> > month,
> > according to https://www.openssl.org/news/vulnerabilities-1.1.1.html, there 
> > were 5
> > high ranked issues in the surrounding... this package is needed by the 
> > freerouter
> > natives... one of them causes freeze in the userspace if hit...
>
> Fixed here (assuming that 1.1.1q contains all current security fixes):
> https://bitbucket.software.geant.org/projects/RARE/repos/rare-nix/commits/86702e887834c19abcfbc0c43aff85e4cbf64ad2

thanks a lot! but,

it was just a silly example... for now, if i understand your commit 
correctly, regardless of what the base nix have, we'll go with this...

so for me, it's fine for a while, but here is my wishlist, descending order:

-nix unstable
-latest nix release, closely followed
-if none of the above is feasible, then this manual patching, but for all the 
core dependencies...

lets start with the very core, libc...  is 2.26??? then 2.31, obviously both 
have flaws, one mentioned in man memcpy:
https://man7.org/linux/man-pages/man3/memcpy.3.html
"
Most notably, in glibc 2.13
       a performance optimization of memcpy() on some platforms
       (including x86-64) included changing the order in which bytes
       were copied from src to dest.
"


rare@fra0001:~$ ls /nix/store/*glibc-2*drv
/nix/store/650h93mbi7gkci1jkgjcnk0v07fd619q-01-fix-ftbfs-with-glibc-2.28.patch.drv
/nix/store/7x9q5qdd27aljvvrnrvabb6h6b0sh082-01-fix-ftbfs-with-glibc-2.28.patch.drv
/nix/store/avigbkww8g64rvaxri8pm2wx7g1p8k5d-glibc-2.26.patch.drv
/nix/store/dnqhil1gji40c1lpc9kkqlr4yvnrd349-glibc-2.31.tar.xz.drv
/nix/store/fbqys9aazk847x4ibb7wf1h8fcycrb5k-02-fix-ftbfs-with-glibc-2.28.patch.drv
/nix/store/kwhpc93japs65g7xm71h8r8yagv56zi5-glibc-2.31.tar.xz.drv
/nix/store/mfmdkbry4id0fgqm36ar462ip7z2a3sy-glibc-2.31.drv
rare@fra0001:~$