-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] kernel (SSA:2013-140-01)
New Linux kernel packages are available for Slackware 13.37 and 14.0 to fix
a security issue.
Here are the details from the Slackware 14.0 ChangeLog:
+--------------------------+
patches/packages/linux-3.2.45/*: Upgraded.
Upgraded to new kernels that fix CVE-2013-2094, a bug that can allow local
users to gain a root shell. Be sure to upgrade your initrd and reinstall
LILO after upgrading the kernel packages.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2094
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/linux-2.6.37.6-3/
Updated packages for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/linux-2.6.37.6-3/
Updated packages for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.45/
Updated packages for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.45/
MD5 signatures:
+-------------+
Slackware 13.37 packages:
99b5d3961b5be56497cd53510a9572ff kernel-firmware-20130512git-noarch-1.txz
de925c472fb6c330eead07a3e767b65a kernel-generic-2.6.37.6-i486-3.txz
d2f771b44accf311737c776fb5704805 kernel-generic-smp-2.6.37.6_smp-i686-3.txz
9d0b7d34403e2a6a2e4936b7095b8e47 kernel-headers-2.6.37.6_smp-x86-3.txz
30f60d09d7b1690ab314db56d6d65df5 kernel-huge-2.6.37.6-i486-3.txz
9184cfc5b40d882336b443aef1897029 kernel-huge-smp-2.6.37.6_smp-i686-3.txz
0b3644301f1404a0cdcc76f6adffeaf6 kernel-modules-2.6.37.6-i486-3.txz
c130f273b9a2aa8cd54a3167ffa48aec kernel-modules-smp-2.6.37.6_smp-i686-3.txz
c4fb8b49f8cb8e4cc62c53ad2a0a4c00 kernel-source-2.6.37.6_smp-noarch-3.txz
Slackware x86_64 13.37 packages:
99b5d3961b5be56497cd53510a9572ff kernel-firmware-20130512git-noarch-1.txz
7efb7195c7d7dbc6ab3f40454670bc64 kernel-generic-2.6.37.6-x86_64-3.txz
e9f689a3ee6f1937c33d0c9ea20ac9ff kernel-headers-2.6.37.6-x86-3.txz
93bc2c1264a195e08ce9bb616832f29d kernel-huge-2.6.37.6-x86_64-3.txz
cc788fc70ae0204c54228c40bce1e8f6 kernel-modules-2.6.37.6-x86_64-3.txz
ed5bbc7fb55c1a4c8e34de5a7a9c43fc kernel-source-2.6.37.6-noarch-3.txz
Slackware 14.0 packages:
99b5d3961b5be56497cd53510a9572ff kernel-firmware-20130512git-noarch-1.txz
3e2a61b57a99907d99eb74e67ff57e0c kernel-generic-3.2.45-i486-1.txz
6fbd61f493081e0526254ed0b7f1f735 kernel-generic-smp-3.2.45_smp-i686-1.txz
3a3a54ba8c971b9b9f93551c97bb06d9 kernel-headers-3.2.45_smp-x86-1.txz
778ff709728bf92c3adf5c7cdaab4dd7 kernel-huge-3.2.45-i486-1.txz
b1416ff63c7d9b497292c2a9997bcd5c kernel-huge-smp-3.2.45_smp-i686-1.txz
39312f1bbffc432c236f03b35c74b790 kernel-modules-3.2.45-i486-1.txz
02927b33dfd01ccbb44f8276484802b1 kernel-modules-smp-3.2.45_smp-i686-1.txz
6a2a843660fd349fe88de23d8db017df kernel-source-3.2.45_smp-noarch-1.txz
Slackware x86_64 14.0 packages:
99b5d3961b5be56497cd53510a9572ff kernel-firmware-20130512git-noarch-1.txz
25804c3fc32f8dc4b8ba25c2de8f969e kernel-generic-3.2.45-x86_64-1.txz
6ea9ec608564408bad734d8610c695b0 kernel-headers-3.2.45-x86-1.txz
0b452f0c8ec46c4ce04fd2d9c78e7687 kernel-huge-3.2.45-x86_64-1.txz
eba43509f3118eb27c7b4e4918b87155 kernel-modules-3.2.45-x86_64-1.txz
43b0d8457ab00cdf1f46461676fc1d71 kernel-source-3.2.45-noarch-1.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg kernel-*.txz
On Slackware 14.0 systems the kernel version has changed, so you will need
to rebuild your initrd if you are using one.
For Slackware 64-14.0 use this command:
/usr/share/mkinitrd/mkinitrd_command_generator.sh -k 3.2.45 | bash
For Slackware 14.0 (32-bit) SMP, use this command:
/usr/share/mkinitrd/mkinitrd_command_generator.sh -k 3.2.45-smp | bash
For Slackware 14.0 (32-bit) uniprocessor, use this command:
/usr/share/mkinitrd/mkinitrd_command_generator.sh -k 3.2.45 | bash
Please note that "uniprocessor" has to do with the kernel you are running,
not with the CPU. Most systems should run the SMP kernel if they can
regardless of the number of cores the CPU has. If you aren't sure which
kernel you are running, run "uname -a". If you see SMP there, you are
running the SMP kernel and should use the 3.2.45-smp version when running
mkinitrd_command_generator. Note that this is only for 32-bit -- 64-bit
systems should always use 3.2.45 as the version.
For all systems (13.37 and 14.0):
If needed, edit your /etc/lilo.conf to adjust the version number on the
"image =" line. By default this will not have a version number and will
just follow the /boot/vmlinuz symlink, but you might need to make this
change if you've edited your lilo.conf manually.
Then, run "lilo" to reinstall the boot loader.
If there are no errors from LILO, reboot the system to begin using the
new kernel.
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
secur...@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majord...@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlGak+sACgkQakRjwEAQIjPxYACghnmJITE+NCaIdNCpaYvVRaKq
cqEAnjv5RGVV5+OyeF7ecnZZWgEU02r1
=pHXI
-----END PGP SIGNATURE-----
