I just released gentoo-sources-3.2.1-r1 for Linux Local Privilege Escalation via SUID /proc/pid/mem . I plan on creating releases for additional kernels with this patch through the day. See the link for more info on the privilege escalation. The following kernel versions contain…
Read more
Attention Gentoo RAID10 users running Linux kernel 3.1.0. There is a serious bug introduced in the 3.1.0 code. The Gentoo Kernel Team advises any of our RAID10 users running 3.1.0 (vanilla or gentoo-sources) to patch their kernel or immediately upgrade…
Read more
Linux 3.0 is now released for Gentoo users in both vanilla and gentoo-source versions. These two ebuilds should be hitting the mirrors in the next few hours. Currently, deblob support is not available due to the kernel tarball being named…
Read more
Just a quick note to announce gentoo-sources-2.6.38 has been released which includes the fbcondecor patch. Also note that the per-session group scheduling patch is included in this release from upstream. I also committed vanilla-sources-2.6.38, as well.
The Gentoo Kernel Team (thanks, asn!) have released 3 patched kernels that cover the Econet root exploit described at: http://lwn.net/Articles/419141/ This covers (CVE-2010-3850), (CVE-2010-3849) and (CVE-2010-4258). The following gentoo-sources contain the fixes: gentoo-sources-2.6.36-r4, gentoo-sources-2.6.35-r14 and gentoo-sources-2.6.32-r23. Edit: 2.6.36-r4, not r6,…
Read more
If you haven’t heard about the new ~200 line patch which, for some users, has improved interactivity on the desktop, you can read about it here. I have released a masked version of gentoo-sources (gentoo-sources-2.6.36-r2) which contains the backport to…
Read more
Attention all Media, Gentoo users and my fellow Gentoo devs: A new kernel vulnerability has been reported and the gentoo bug has been filed. Within 4 hours of this filing, the kernel team has released the following: The fix for…
Read more
In light of the recent kernel vulnerabilities, issues with our kernel stabilization policy have been brought to light. The discussion and potential solution was initiated by Kerin Millar, one of our more technical users (who I would like to see…
Read more
Let’s talk about kernel releases, the latest two kernel vulnerabilities, and what vanilla or gentoo-sources you should be running. The two vulnerabilities I’m talking about are: CVE-2010-3301 (http://bugs.gentoo.org/show_bug.cgi?id=337645) CVE-2010-3081 (http://bugs.gentoo.org/show_bug.cgi?id=337659) Kernel Versions 2.6.32 >=gentoo-sources-2.6.32-r18 and vanilla-sources-2.6.32.23 contain the fixes for…
Read more
Why isn’t any version of gentoo-sources 2.6.35 stable? There exists a bug that appears with the combination of the dhcpcd module from baselayout-1 and kernel versions >= 2.6.35. Since we could not use a stable kernel with a stable baselayout,…
Read more