Is there a SuSE kernel SOURCE with the "Debian Hack" patched
I normally use the kernels in ftp://ftp.suse.com/pub/people/mantel/next/ but the present version has not been updated since september 15. Does SuSE have a newer kernel source that are more recent, and has been patched to solve the "Debian Hack" problem. Does SuSE have another place where generally more updated versions are located. Bo Jacobsen
On Fri, 5 Dec 2003 17:40:48 +0100, "Bo Jacobsen"
I normally use the kernels in ftp://ftp.suse.com/pub/people/mantel/next/ but the present version has not been updated since september 15.
Does SuSE have a newer kernel source that are more recent, and has been patched to solve the "Debian Hack" problem.
Does SuSE have another place where generally more updated versions are located.
... how about YOU? or get the file ls-Ral.tar.gz from ftp.suse.com/pub, extract it, then use something like nedit to search it . -- /// Michael J. Tobler: motorcyclist, surfer, skydiver, \\\ \\\ and author: "Inside Linux", "C++ HowTo", "C++ Unleashed" /// The law will never make men free; it is men who have got to make the law free. - Henry David Thoreau
Hi Bo On Friday 05 December 2003 17:40, Bo Jacobsen wrote:
I normally use the kernels in ftp://ftp.suse.com/pub/people/mantel/next/ but the present version has not been updated since september 15.
I think you should always use the ftp-locations specified in the particular security announcement. For the kernel brk() vulnerability, patches were announced by Olaf Kirch on Thu, 4 Dec 2003. If you follow the link below, you can read this message again via the SuSE mailinglist archives. http://lists.suse.com/archive/suse-security-announce/2003-Dec/0002.html Greetings Sven
On Fri, 5 Dec 2003, Bo Jacobsen wrote:
I normally use the kernels in ftp://ftp.suse.com/pub/people/mantel/next/ but the present version has not been updated since september 15.
Does SuSE have a newer kernel source that are more recent, and has been patched to solve the "Debian Hack" problem.
I normally do the same (using the mantel/next-kernels), but until there are newer one's available, I just installed the updated kernel-source-rpm from suse 9.0 (even if I don't use suse 9.0) and based my current kernel on that tree. (you can even build your own suse...bz2 by diffing this against a plain 2.4.21 from kernel.org I think) c'ya sven -- PGP/GPG key: on request or via any keyserver RSA ID:934F12CD Fingerprint:0F C6 E5 4B FA 1E 08 29 97 AA 62 D7 73 43 C4 73 DSA ID:8750FFD9 Fingerprint:74A9 662F 3ECA B86F 32EB 3503 F444 0802 8750 FFD9
On Fri, Dec 05, 2003 at 11:05:17PM +0100, Sven Koch wrote:
I normally do the same (using the mantel/next-kernels), but until there are newer one's available, I just installed the updated kernel-source-rpm from suse 9.0 (even if I don't use suse 9.0) and based my current kernel on that tree.
FWIW, the mantel Kernel has the brk fix already (it has been known for a while, but the security impact didn't become obvious until after the Debian break-in). However, there probably won't be any 2.4 kernels from Hubert; we're currently working on 2.6. Olaf -- Olaf Kirch | Stop wasting entropy - start using predictable okir@suse.de | tempfile names today! ---------------+
On Monday 08 December 2003 00:45, Olaf Kirch wrote:
On Fri, Dec 05, 2003 at 11:05:17PM +0100, Sven Koch wrote:
I normally do the same (using the mantel/next-kernels), but until there are newer one's available, I just installed the updated kernel-source-rpm from suse 9.0 (even if I don't use suse 9.0) and based my current kernel on that tree.
FWIW, the mantel Kernel has the brk fix already (it has been known for a while, but the security impact didn't become obvious until after the Debian break-in).
Thats good to know, since I've been running those kernels (quite happily) for some time.
However, there probably won't be any 2.4 kernels from Hubert; we're currently working on 2.6.
Yes, please don't bother him - keep his nose to the grindstone. ;-) -- _____________________________________ John Andersen
participants (6)
-
Bo Jacobsen -
John Andersen -
mjt -
Olaf Kirch -
Sven Koch -
Sven Wahl