news 28 Posted July 1, 2017 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] kernel (SSA:2017-181-02) New kernel packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/linux-4.4.75/*: Upgraded. This kernel fixes security issues that include possible stack exhaustion, memory corruption, and arbitrary code execution. Be sure to upgrade your initrd after upgrading the kernel packages. If you use lilo to boot your machine, be sure lilo.conf points to the correct kernel and initrd and run lilo as root to update the bootloader. If you use elilo to boot your machine, you should run eliloconfig to copy the kernel and initrd to the EFI System Partition. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7482 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000365 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated packages for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-generic-4.4.75-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-generic-smp-4.4.75_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-headers-4.4.75_smp-x86-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-huge-4.4.75-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-huge-smp-4.4.75_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-modules-4.4.75-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-modules-smp-4.4.75_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/linux-4.4.75/kernel-source-4.4.75_smp-noarch-1.txz Updated packages for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-generic-4.4.75-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-headers-4.4.75-x86-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-huge-4.4.75-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-modules-4.4.75-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/linux-4.4.75/kernel-source-4.4.75-noarch-1.txz Updated packages for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-generic-4.9.35-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-generic-smp-4.9.35_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-huge-4.9.35-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-huge-smp-4.9.35_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-modules-4.9.35-i586-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-modules-smp-4.9.35_smp-i686-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/kernel-headers-4.9.35_smp-x86-1.txz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/k/kernel-source-4.9.35_smp-noarch-1.txz Updated packages for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-generic-4.9.35-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-huge-4.9.35-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-modules-4.9.35-x86_64-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/d/kernel-headers-4.9.35-x86-1.txz ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/k/kernel-source-4.9.35-noarch-1.txz MD5 signatures: +-------------+ Slackware 14.2 packages: 57d55b0d62204538fac224b22741bdad kernel-generic-4.4.75-i586-1.txz 81d3bce28234fc627aca0cfe53b82473 kernel-generic-smp-4.4.75_smp-i686-1.txz 80a17782de46338e4577adf869764659 kernel-headers-4.4.75_smp-x86-1.txz cd27938c62bb39e80ebf09702e63a36b kernel-huge-4.4.75-i586-1.txz 56fea090e299bf0039ae85784beef935 kernel-huge-smp-4.4.75_smp-i686-1.txz 4f6123e1c6887943544ce183916974c7 kernel-modules-4.4.75-i586-1.txz fe263ee83e9937a819bd00850044e6b7 kernel-modules-smp-4.4.75_smp-i686-1.txz 8e54d04753ad5c24760cf0aad23b3fa6 kernel-source-4.4.75_smp-noarch-1.txz Slackware x86_64 14.2 packages: 450e4e05eea49c96905b2b389bec8984 kernel-generic-4.4.75-x86_64-1.txz bee08c3d724db810fc0f67a42fe0d41c kernel-headers-4.4.75-x86-1.txz a4a8c40118016fa1cf46eb436d81a626 kernel-huge-4.4.75-x86_64-1.txz 05a55276038269c6c73ca2620b19545c kernel-modules-4.4.75-x86_64-1.txz c86fb02a7bc94c5486869e2ec280576b kernel-source-4.4.75-noarch-1.txz Slackware -current packages: e81ea5be1ca603d09e3b92fb12853c95 a/kernel-generic-4.9.35-i586-1.txz 22936292dfddbc1c492702831a29ef1e a/kernel-generic-smp-4.9.35_smp-i686-1.txz 6ebdffe28023be0b27f3bab2f41f08ba a/kernel-huge-4.9.35-i586-1.txz dbb94e3dcbd3090bca7d925c87585a04 a/kernel-huge-smp-4.9.35_smp-i686-1.txz 6d34cafdef750d823ade2e9cc344635f a/kernel-modules-4.9.35-i586-1.txz bc28d36ba0fa5a2a20a299d070b5fada a/kernel-modules-smp-4.9.35_smp-i686-1.txz 39f37944b9c2ae4a1242ef4979a4256e d/kernel-headers-4.9.35_smp-x86-1.txz 4837a920917e21ed1f63c3c7ce39ef59 k/kernel-source-4.9.35_smp-noarch-1.txz Slackware x86_64 -current packages: 08bc5e406d79bc2e77414e78d9960c3a a/kernel-generic-4.9.35-x86_64-1.txz ea2471ae126f28c8b9f0f478773735da a/kernel-huge-4.9.35-x86_64-1.txz 844c05b167224a60c65c3c64a087b3f2 a/kernel-modules-4.9.35-x86_64-1.txz df544f0ff4479cc2caec796f2dc44ac3 d/kernel-headers-4.9.35-x86-1.txz 574f6135608a364e4471360903a49380 k/kernel-source-4.9.35-noarch-1.txz Installation instructions: +------------------------+ Upgrade the packages as root: # upgradepkg kernel-*.txz If you are using an initrd, you'll need to rebuild it. For a 32-bit SMP machine, use this command (substitute the appropriate kernel version if you are not running Slackware 14.2): # /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.75-smp | bash For a 64-bit machine, or a 32-bit uniprocessor machine, use this command (substitute the appropriate kernel version if you are not running Slackware 14.2): # /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 4.4.75 | bash Please note that "uniprocessor" has to do with the kernel you are running, not with the CPU. Most systems should run the SMP kernel (if they can) regardless of the number of cores the CPU has. If you aren't sure which kernel you are running, run "uname -a". If you see SMP there, you are running the SMP kernel and should use the 4.4.75-smp version when running mkinitrd_command_generator. Note that this is only for 32-bit -- 64-bit systems should always use 4.4.75 as the version. If you are using lilo or elilo to boot the machine, you'll need to ensure that the machine is properly prepared before rebooting. If using LILO: By default, lilo.conf contains an image= line that references a symlink that always points to the correct kernel. No editing should be required unless your machine uses a custom lilo.conf. If that is the case, be sure that the image= line references the correct kernel file. Either way, you'll need to run "lilo" as root to reinstall the boot loader. If using elilo: Ensure that the /boot/vmlinuz symlink is pointing to the kernel you wish to use, and then run eliloconfig to update the EFI System Partition. +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security ( -at -) slackware.com +------------------------------------------------------------------------+ Share this post Link to post
