[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Put gcc-4.6/gcc-4.7 update for retpoline support in our radar

[Raphaël Hertzog]

Raphaël Hertzog pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ebdf4656 by Raphaël Hertzog at 2018-02-15T12:16:05+01:00
Put gcc-4.6/gcc-4.7 update for retpoline support in our radar

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -15,6 +15,16 @@ dovecot (Thorsten Alteholz)
   NOTE: maintainer and security team are looking into this
   NOTE: probably no-dsa
 --
+gcc-4.6
+  NOTE: Backport the retpoline support for spectre mitigation.
+  NOTE: Coordinate with jmm who started the work for gcc-4.9 in jessie.
+  NOTE: This gcc version is used by the kernel build. Its update is
+  NOTE: thus more important than the one of gcc-4.7.
+--
+gcc-4.7
+  NOTE: Backport the retpoline support for spectre mitigation.
+  NOTE: Do we want/need it on this gcc version as well?
+--
 icu (Thorsten Alteholz)
   NOTE: 20171229: CVE-2017-15422 was reported via Google Code issue report in Chromium project; report is not visible to the public
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ebdf4656e9b85e8423d24c81b232edf16c2c2b89

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ebdf4656e9b85e8423d24c81b232edf16c2c2b89
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180215/cd0bacf5/attachment.html>