2.2.0 up to 2.4.10 Kernel Bug
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE. For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works. /Dee
On Friday 19 October 2001 12:49 pm, Dee McKinney, babbled about:
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE.
For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works.
/Dee
Dee, It seems that there are two kernels affected with the security bug. I read about them last evening. 2.2.x with x<=19 and 2.4.x with x<=9 have the same security bug. 2.4.10 fixed the bug somewhat, but not completely and 2.4.12 completely fixes it and many other things. The mantel version seems to work just fine as I have just installed it and am very pleased with the improvements it adds. Even boot up seems to be improved as it takes less time now. Only thing it broke on my system is the NVidia graphics card as there are no drivers built beyond 2.4.10 right now. I am seeking out a suitable ATI Radeon replacement now though. end of line Tracer -- ---KMail 1.3.1--- SuSE Linux v7.2--- Registered Linux User #225206 /tracerb@sprintmail.com/ *Magic Page Products* *Team Amiga* http://home.sprintmail.com/~tracerb
Tracer Bullet writes:
On Friday 19 October 2001 12:49 pm, Dee McKinney, babbled about:
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE.
For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works.
/Dee
Dee, It seems that there are two kernels affected with the security bug. I read about them last evening. 2.2.x with x<=19 and 2.4.x with x<=9 have the same security bug. 2.4.10 fixed the bug somewhat, but not completely and 2.4.12 completely fixes it and many other things. The mantel version seems to work just fine as I have just installed it and am very pleased with the improvements it adds. Even boot up seems to be improved as it takes less time now. Only thing it broke on my system is the NVidia graphics card as there are no drivers built beyond
All you have to do is recompile the driver module.
2.4.10 right now. I am seeking out a suitable ATI Radeon replacement now though.
On Friday 19 October 2001 16:49, Dee McKinney wrote:
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE.
For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works.
Since the stock kernel that comes with 7.3 is 2.4.10, even those people with brand-new installs will probably want to upgrade their kernels. However, linux-2.4.12.SuSE-7 is in the usual place (ftp://ftp.suse.com/pub/people/mantel/next) - although it's a development version (as are all of Hubert Mantel's pet kernels). It should compile and work with no problems. Basically, the solution's already there; it's just the duty of admins to keep abreast of them *g*. cheers, Gideon.
2.4.7 has been available for some time in the official update tree. Also, the article, as far as my broken german can ascertain, talks about the fsck-up in 2.4.11 where you couldn't create files through symlinks, leading to a messed up /dev/mouse and other when yast tried to configure it. I honestly can't see the numbers 2.4.4 in the article. regards Anders On Friday 19 October 2001 18.49, Dee McKinney wrote:
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE.
For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works.
/Dee
-- ICQ: 132715168 YM: cicerose
On Fri, Oct 19, 2001 at 10:04:27PM +0200, Anders Johansson wrote:
2.4.7 has been available for some time in the official update tree.
Also, the article, as far as my broken german can ascertain, talks about the fsck-up in 2.4.11 where you couldn't create files through symlinks, leading to a messed up /dev/mouse and other when yast tried to configure it.
I honestly can't see the numbers 2.4.4 in the article.
Maybe this URL tells more: http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=221337&start=2001-10-15&end=2001-10-21 -Kastus
regards Anders
On Friday 19 October 2001 18.49, Dee McKinney wrote:
You will need a translation like http://world.altavista.com/ to read http://www.heise.de/newsticker/data/odi-19.10.01-001/ but it talks about how there is a big security risk in the stock 2.4.4 that comes with 7.2 SuSE.
For all of us that are still unable to buy 7.3 and like to run stock rpm's from SuSE, I trust a newer kernel is in the works.
/Dee
participants (6)
-
Anders Johansson -
Dee McKinney -
Gideon Hallett -
Jesse Marlin -
Konstantin (Kastus) Shchuka -
Tracer Bullet