sm-commit AT lists.ibiblio.org
Subject: Source Mage code commit list
List archive
Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879)
- From: Ladislav Hagara <ladislav.hagara AT unob.cz>
- To: Elisamuel Resto <samuel AT dragonboricua.net>
- Cc: "sm-commit AT lists.ibiblio.org" <sm-commit AT lists.ibiblio.org>
- Subject: Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879)
- Date: Tue, 15 Jan 2008 17:29:08 +0100
kernels/linux/HISTORY | 4 ++++shouldn't this have had the SECURITY_PATCH bumped and bug made for integration
kernels/linux/info/patches/maintenance_patches/patch-2.6.23.14 | 6 ++++++
kernels/linux/latest.defaults | 2 +-
3 files changed, 11 insertions(+), 1 deletion(-)
request to go along with it?
It depends.
Looking into DETAILS of linux, there is none SECURITY_PATCH.
Looking into ChangeLogs of 2.6.23 linux kernel, there is a CVE mentioned also in:
2.6.23.10 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10
2.6.23.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8
2.6.23.7 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.7
Look at www interface to linux 2.6.23 git, additional CVEs:
http://git.kernel.org/?p=linux%2Fkernel%2Fgit%2Fstable%2Flinux-2.6.23.y.git&a=search&h=HEAD&st=commit&s=CVE
The problem / the advantage of our linux spell is that users can choose both their own version of linux kernel and their own patches. I do not know if this CVE is also a problem of 2.6.22 or 2.6.24-rc kernels. If we had DEFAULT linux kernel "LATEST_maintenance_patches" we should certainly use SECURITY_PATCH in DETAILS of linux. Of course if the security problem was only in rc kernel, the SECURITY_PATCH could cause to recompile also stable linux kernel. We should probably need SECURITY_PATCH in "latest.defaults" (file of linux spell):
LATEST_maintenance_patches=patch-2.6.23.14:SECURITY_PATCH=2
LATEST_PRE_2_6=patch-2.6.24-rc7:SECURITY_PATCH=6
I suggested several times that we should integrate changes of linux spell in test grimoire immediately into stable grimoire. Now we have 2.6.23.14 in test and 2.6.23.9 in stable (CVE also in 2.6.23.10).
--
Ladislav Hagara
-
[SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879),
Ladislav Hagara, 01/14/2008
-
Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879),
Elisamuel Resto, 01/14/2008
- Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879), Ladislav Hagara, 01/15/2008
-
Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (1606c4cfd3e311e841fa816a61aeb5cc42351879),
Elisamuel Resto, 01/14/2008
Archive powered by MHonArc 2.6.24.