Re: kernel update highly recommended
On 12/09/2009 11:14 AM, Kyle McMartin wrote: Hi folks, I'd highly recommend if you're running 2.6.31 or 2.6.32, that you update to the latest kernel in the koji builds here: http://koji.fedoraproject.org/koji/taskinfo?taskID=1864871 http://koji.fedoraproject.org/koji/taskinfo?taskID=1864876 They fix a rather severe security problem with ext4 caused by insufficient permission checking by the ext4 ioctl code, allowing a malicious local user to corrupt files. Note, the ioctl isn't currently used by userspace, so if you build your own kernels, you can just nuke the entire EXT4_IOC_MOVE_EXT ioctl case. NOTE: This is only a problem if you're using EXT4, if you aren't, you're safe. I'll get these pushed out to stable asap, but I wanted to let folks know just in case rawhide doesn't compose before the downtime. This a rawhide only issue or F12 as well? -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: kernel update highly recommended
On Wed, Dec 09, 2009 at 11:20:02 -0700, "Nathanael D. Noblet" wrote: > > This a rawhide only issue or F12 as well? It affects F12. You want the -166 kernel. However right now it is still building. (I didn't check to see if some arches are done already.) The updated kernel for rawhide has completed building. -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: kernel update highly recommended
On Wed, Dec 09, 2009 at 11:20:02AM -0700, Nathanael D. Noblet wrote: >> I'd highly recommend if you're running 2.6.31 or 2.6.32, that you update >> to the latest kernel in the koji builds here: >> >> http://koji.fedoraproject.org/koji/taskinfo?taskID=1864871 >> http://koji.fedoraproject.org/koji/taskinfo?taskID=1864876 >> > This a rawhide only issue or F12 as well? > It is indeed both, so there's a build there for each. regards, Kyle -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: kernel update highly recommended
On Wed, Dec 09, 2009 at 12:23:50 -0600, Bruno Wolff III wrote: > On Wed, Dec 09, 2009 at 11:20:02 -0700, > "Nathanael D. Noblet" wrote: > > > > This a rawhide only issue or F12 as well? > > It affects F12. You want the -166 kernel. However right now it is still > building. (I didn't check to see if some arches are done already.) The > updated kernel for rawhide has completed building. The 686 step is not quite done yet, but eveything else is. You can grab the rpms that are done by walking down into the tasks. The build will probably be done in a few minutes though. -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: kernel update highly recommended
2009/12/9 Kyle McMartin : > NOTE: This is only a problem if you're using EXT4, if you aren't, you're > safe. ReiserFS FTW!!! :) -- Christopher Brown -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
