Glibc bug in Arch

[°pdi°]

Why not "pacman -S glibc"?

[waves]

[°pdi°]

I tried it without problems, nothing breaks.

I would say: Backup your Rune first and then try it by yourself.

[waves]

Good to hear, I will backup and give that update a try.

Though the lack of responses from developers on this (and on the more general question about handling vulnerabilities going forward) is a bit distressing. Of course the devs are plenty busy with other things and only have so much time, but updates/vulnerabilities is a pretty important issue I'd think.

Perhaps we should start a more general discussion post about securing the device and mitigating risks. Topics to cover could be how to change password, setting up firewall/ip filters, how to do updates (and backup beforehand), links to sites with vulnerabilities, and so on.

[Orion]

Hi Waves,
sorry for the delay of our response. At the moment we are working hard to a complete rebuild of the system that is in a good state of progress. Unfortunately we have no time to invest in the current enviroment, so the best solution is to update the glib library as proposed by °pdi°.
Obviously the new system will have the latest patches and security fixes. It also will be easier to update, mantain and extend. So do not loose the faith and stay tuned.

I looked at your work with the youtube-dl patch, it is very good, are you interested in integrating it in the new codebase?
Send me a PM if you want to collaborate. Thanks.

Ciao.
Simone.