On Tue, 2024-07-16 at 10:29 +0100, Jose Quaresma via
lists.openembedded.org wrote:
> Still side effects of the XZ backdoor.
> 
> Racional [1]:
> 
> License incompatibility and library bloatedness were the reasons.
> Given recent events we're never going to take a dependency on
> libsystemd,
> though we might implement the notification protocol ourselves if it
> isn't too much work.
> 
> [1]
> https://github.com/openssh/openssh-portable/pull/375#issuecomment-2027749729
> 
> Signed-off-by: Jose Quaresma <[email protected]>

I was reading about this in your previous patch and was planning to
make a comment about it. Thanks for splitting it out!

I remember when I was asked to originally merge this patch to OE-Core
and I had reservations at the time. I tried to push back and was told
all the other distros were doing it and it was essential we did as well
:/.

This does raise the question of whether we should be carrying it. Did
the other distros do anything with it after the XZ issue?

Cheers,

Richard
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#202093): 
https://lists.openembedded.org/g/openembedded-core/message/202093
Mute This Topic: https://lists.openembedded.org/mt/107249027/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to