Re: Automatic downloading of non-free software by stuff in main

[Tollef Fog Heen <tfheen@err.no>]

]] "G. Branden Robinson" 

> At 2017-12-01T18:11:34+0100, Adam Borowski wrote:
> > Microcode itself has data loss and local exploits (such
> > as an unprivileged user of an unprivileged VM taking over the host machine),
> > then often comes in one bunch with IME updates that close remote holes.
> 
> And how do we know they aren't opening new ones due to the same factors
> (bad design or bad intent) that led to the originals?

This argument can be applied to any bug fix we or an upstream does, but
that doesn't mean we avoid shipping updated software.

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are