Re: [suse-security] SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:005)
Hi, can anyone at SuSE give us an update as to when the 8.0 kernels will be available. They have been promised a few times for 'tomorrow', but so far nothing has materialised. I believe that it's only a few days now till the exploit is released. TIA, and best regards. . . Fred
On Mon, 23 Feb 2004, Fred Merritt wrote:
Hi,
Hello.
can anyone at SuSE give us an update as to when the 8.0 kernels will be available. They have been promised a few times for 'tomorrow', but so far nothing has materialised. I believe that it's only a few days now till the exploit is released.
Due to some bad interaction of the patch with the 8.0 kernel we had to
build and test it again. Give us three days to deliver a stable
kernel with all known security bugs fixed.
Bye,
Thomas
--
Thomas Biege
Hi, On Tue, 24 Feb 2004, Thomas Biege wrote:
Due to some bad interaction of the patch with the 8.0 kernel we had to build and test it again. Give us three days to deliver a stable kernel with all known security bugs fixed.
BTW: what happened to the k_deflt-2.4.18-282 kernel (of Dec 17 2003)? On the update server there's only the older k_deflt-2.4.18-281 now; were there any problems with the -282 version, too, or was it just accidentally removed? Bye, Martin
On Tue, 24 Feb 2004, Martin Köhling wrote:
Hi,
On Tue, 24 Feb 2004, Thomas Biege wrote:
Due to some bad interaction of the patch with the 8.0 kernel we had to build and test it again. Give us three days to deliver a stable kernel with all known security bugs fixed.
BTW: what happened to the k_deflt-2.4.18-282 kernel (of Dec 17 2003)?
On the update server there's only the older k_deflt-2.4.18-281 now; were there any problems with the -282 version, too, or was it just accidentally removed?
I am not aware of any problems with that. Maybe I happens
due to massiv hardware problems with our primary mirror server.
I'll check this.
Bye,
Thomas
--
Thomas Biege
On Tue, 24 Feb 2004, Martin Köhling wrote:
Hi,
Hi.
On Tue, 24 Feb 2004, Thomas Biege wrote:
Due to some bad interaction of the patch with the 8.0 kernel we had to build and test it again. Give us three days to deliver a stable kernel with all known security bugs fixed.
BTW: what happened to the k_deflt-2.4.18-282 kernel (of Dec 17 2003)?
On the update server there's only the older k_deflt-2.4.18-281 now; were there any problems with the -282 version, too, or was it just accidentally removed?
I was unable to find the 282 kernel releases and they were not deleted
due to our hardware failures.
Where and when did you saw them?
Bye,
Thomas
--
Thomas Biege
On the update server there's only the older k_deflt-2.4.18-281 now; were there any problems with the -282 version, too, or was it just accidentally removed?
I was unable to find the 282 kernel releases and they were not deleted due to our hardware failures. Where and when did you saw them?
I have the rsync listing of planetmirror.com for the SuSE 8.0 update dir, as of 2004-01-25. They clearly show the -282 packages. I would like to think that the only way for these packages to appear there is by way of SuSE supplying them :))
rpm -Kv /tmp/k_deflt-2.4.18-282.i386.rpm /tmp/k_deflt-2.4.18-282.i386.rpm: MD5 sum OK: 85a415b18623f975fe784ed79add7896 gpg: Signature made Thu 18 Dec 2003 09:05:11 NZDT using DSA key ID 9C800ACA gpg: Good signature from "SuSE Package Signing Key
"
Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.
Hi Volker,
I have the rsync listing of planetmirror.com for the SuSE 8.0 update dir, as of 2004-01-25. They clearly show the -282 packages. I would like to think that the only way for these packages to appear there is by way of SuSE supplying them :))
rpm -Kv /tmp/k_deflt-2.4.18-282.i386.rpm /tmp/k_deflt-2.4.18-282.i386.rpm: MD5 sum OK: 85a415b18623f975fe784ed79add7896 gpg: Signature made Thu 18 Dec 2003 09:05:11 NZDT using DSA key ID 9C800ACA gpg: Good signature from "SuSE Package Signing Key
"
--> These are the packages from the last kernel update (see SuSE-SA:2004:001). They contain the kernel you should be running since January 5 of this year. Cheers, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech@iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50
rpm -Kv /tmp/k_deflt-2.4.18-282.i386.rpm
--> These are the packages from the last kernel update (see SuSE-SA:2004:001). They contain the kernel you should be running since January 5 of this year.
Yes, the kernel which I should have been running since 5 Jan, but which I shouldn't be running any more since -284 came out. :) At that point, the -282 kernels evaporated from the updates directory. Perhaps SuSE is running out of space and gets rid of (some) big obsolete updates. Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.
On Wed, 25 Feb 2004, Volker Kuhlmann wrote:
On the update server there's only the older k_deflt-2.4.18-281 now; were there any problems with the -282 version, too, or was it just accidentally removed?
I was unable to find the 282 kernel releases and they were not deleted due to our hardware failures. Where and when did you saw them?
I have the rsync listing of planetmirror.com for the SuSE 8.0 update dir, as of 2004-01-25. They clearly show the -282 packages. I would like to think that the only way for these packages to appear there is by way of SuSE supplying them :))
I am not familiar with all our rsync, mirroring, replacing, moving
deleting of packages policies but we have a new 8.0 kernel out since
yesterday. It includes patches for every known security issue.
Bye,
Thomas
--
Thomas Biege
participants (5)
-
Armin Schoech
-
Fred Merritt
-
Martin Köhling
-
Thomas Biege
-
Volker Kuhlmann