Re: Better communication about spectre/meltdown

[Roberto C. Sánchez <roberto@debian.org>]

On Sun, Apr 01, 2018 at 05:04:03PM +0200, Emilio Pozuelo Monfort wrote:
> 
> Your new GCC builds binaries such as libgcc1 and libstdc++6. That is going to
> affect nearly all the archive at runtime, and I wonder if it's the right
> approach. We introduced GCC 4.8 in wheezy, named gcc-mozilla (a bad name I know)
> which didn't build these libraries, so it didn't affect the rest of the archive,
> which was still building with GCC 4.6 or 4.7 (depending on the architecture).
> 
> One option here would be to use your gcc-4.9 with the gcc-mozilla packaging to
> build everything in one binary, we'd only need to make sure that
> firefox/thunderbird are still happy about it. Perhaps that's just complicating
> things, so I'm not opposed to introducing gcc-4.9. Just wondering about the
> consequences of the library updates.
> 

That is interesting. I had not considered that particular aspect. It
definitely sounds like caution is warranted here.

Regards,

-Roberto
-- 
Roberto C. Sánchez