[opensuse-factory] tumbleweed security update for glibc
Hi, Is there a glibc update for the recent DNS resolver security issue for Tumbleweed? I updated in the normal way, but the glibc package is still from last year. In general how are security updates released for Tumbleweed? -Andi -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard ismail
On Mon, Feb 22, 2016 at 11:44:35AM +0200, İsmail Dönmez wrote:
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard
Correct, and this repo should be added hopefully. The new glibc is also on its way via the regular rolling release integration methods, this just takes a bit longer. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Marcus Meissner wrote:
On Mon, Feb 22, 2016 at 11:44:35AM +0200, İsmail Dönmez wrote:
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard
Correct, and this repo should be added hopefully.
This repo is not installed on my Tumbleweed system. It should be installed by which image/package? Ciao, Michael.
22.02.2016 15:06, Michael Ströder пишет:
Marcus Meissner wrote:
On Mon, Feb 22, 2016 at 11:44:35AM +0200, İsmail Dönmez wrote:
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard
Correct, and this repo should be added hopefully.
This repo is not installed on my Tumbleweed system.
It should be installed by which image/package?
The correct path for TW is http://download.opensuse.org/update/tumbleweed/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Mon, Feb 22, 2016 at 01:06:20PM +0100, Michael Ströder wrote:
Marcus Meissner wrote:
On Mon, Feb 22, 2016 at 11:44:35AM +0200, İsmail Dönmez wrote:
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard
Correct, and this repo should be added hopefully.
This repo is not installed on my Tumbleweed system.
It should be installed by which image/package?
In theory if you install from the ISO image.... Although I see in openSUSE:Factory/_product that it is commented out: <!-- url name="update">http://download.opensuse.org/update/factory/</url> --> I do not recall how I got the URL, likely manually. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Mon, Feb 22, 2016 at 02:03:30PM +0100, Marcus Meissner wrote:
On Mon, Feb 22, 2016 at 01:06:20PM +0100, Michael Ströder wrote:
Marcus Meissner wrote:
On Mon, Feb 22, 2016 at 11:44:35AM +0200, İsmail Dönmez wrote:
On 20 Feb 22:45, Andi Kleen wrote:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/standard
Correct, and this repo should be added hopefully.
This repo is not installed on my Tumbleweed system.
It should be installed by which image/package?
In theory if you install from the ISO image.... Although I see in openSUSE:Factory/_product that it is commented out:
<!-- url name="update">http://download.opensuse.org/update/factory/</url> -->
I do not recall how I got the URL, likely manually.
it is actually coming from "other.xml" during installation, as built from the "skelcd-control-openSUSE" package. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
ma., 22.02.2016 kl. 11.44 +0200, skrev İsmail Dönmez:
Its available from factory-update repo: http://download.opensuse.org/repositories/openSUSE:/Factory:/Update/s tandard
ismail
http://download.opensuse.org/update/tumbleweed/ For those of us that want to have a shorter url :-) /Bjørn -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Op zaterdag 20 februari 2016 22:45:52 CET schreef Andi Kleen:
Hi,
Is there a glibc update for the recent DNS resolver security issue for Tumbleweed?
I updated in the normal way, but the glibc package is still from last year.
In general how are security updates released for Tumbleweed?
-Andi
Depends. The ones like the Heartbleed, the glibc have high priority, hence cannot wait for the next TW snapshot to be released. And that's what the TW update repo is for. -- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (7)
-
Andi Kleen -
Andrei Borzenkov -
Bjørn Lie -
İsmail Dönmez -
Knurpht - Gertjan Lettink -
Marcus Meissner -
Michael Ströder