Mike Pagano's Weblog

I just released gentoo-sources 2.6.32-r14, 2.6.34-r6 and 2.6.35-r2. These all include the patch for the local privilege escalation flaw bug that was recently announced. So, I do recommended all gentoo-sources users upgrade to these latest versions.

There is also a bug fix included for people that were experiencing the freeze/oops in 2.6.35.2 as referenced in this bug.

Please note that 2.6.33 is no longer being supported by Gentoo-Sources.

If you’re network interface is having trouble getting an IP from dhcpcd on kernel version 2.6.35 please sync and update to dhcpcd-5.2.7.

Thanks

upstream bug: https://bugzilla.kernel.org/show_bug.cgi?id=16187#c12
Fix changelog: http://roy.marples.name/archives/dhcpcd-discuss/2010/0218.html

I have just committed gentoo-sources-2.6.32-r4 to the tree.

This kernel uses genpatches-2.6.32-5 and includes the following:

linux 2.6.32.1
linux 2.6.32.1
linux 2.6.32.2
linux 2.6.32.3
linux 2.6.32.4
linux 2.6.32.5
linux 2.6.32.6
linux 2.6.32.7
linux 2.6.32.8
A transmit hang fix for broadcom 5906

And the normal patches we always carry over such as fbcondecor, etc.

I just committed gentoo-sources-2.6.31 to the portage tree.

Check out Kernel Newbies for the ChangeLog.

gentoo-sources-2.6.30-r3 contains a fix for a security flaw that also comes complete with some exploit code.

Apparently, it only affects 2.6.30 so if you gentoo-sources-2.6.30 please upgrade to r3.

I just committed it, so it should hit the mirrors soon after I post this.

Thanks to everyone who brought to my attention and thanks kerframil for the links below that provide additional information.

http://isc.sans.org/diary.html?storyid=6820
http://lists.immunitysec.com/pipermail/dailydave/2009-July/005810.html
http://www.youtube.com/watch?v=UdkpJ13e6Z0

Just a quick note to say we have released gentoo-sources-2.6.29-r5 which includes linux 2.6.29.4.

Give it a test, please, as we plan on asking for 2.6.29 stablizing real soon™ .

Just a quick note to say gentoo-sources-2.6.29-r1 was just put in the  portage tree. This release includes the 2.6.29.1 patch which has a fix for forcedeth issues.  Also included are the ext4 filesystem patches.  This is definitely a must upgrade for ext4 users.

http://sources.gentoo.org/viewcvs.py/linux-patches/genpatches-2.6/tags/2.6.29-2/

I just released gentoo-sources-2.6.28-r4. Amoung other patches, it includes four patches that help prevent data loss on ext4 filesystems during a crash. So, if you use ext4 and gentoo-sources, you might want to upgrade to r4 when it hits the mirrors.

Thanks to the hardened team for identifying those patches and making it easy to include them in genpatches.

The changes for this release of genpatches can be found here [1].

[1] http://archives.gentoo.org/gentoo-kernel/msg_fb5df8b9d72b815361711a5b26aed64e.xml

I just released a new gentoo-sources 2.6.27 which includes linux patches 2.6.27.1, 2.6.27.2 and 2.6.27.3.

So….

Sync, emerge, make, install, reboot, wash, rinse, repeat.

As always, file bugs to http://bugs.gentoo.org

Just a quick note that I just committed gentoo-sources-2.6.27 with ~x86.  Other archs, please test and keyword at your convenience.

Thanks.