[SECURITY] Fedora Core 5 Test Update: kernel-2.6.17-1.2159_FC5

[Dave Jones]

---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2006-816
2006-07-17
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : kernel
Version     : 2.6.17
Release     : 1.2159_FC5
Summary     : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

---------------------------------------------------------------------
Update Information:

Update to 2.6.17.6, which fixes a local root vulnerability
in the /proc filesystem. This vulnerability isn't thought to
be possible to exploit on Fedora systems with SELinux enabled.
Additionally, the exploit for this vulnerability relies upon
a.out support, which the Fedora kernel has disabled.
Regardless, this update has been made available in case
other attack vectors become apparent.
---------------------------------------------------------------------
* Sun Jul 16 2006 Dave Jones <davej(a)redhat.com&gt;
- 2.6.17.6
* Fri Jul 14 2006 Dave Jones <davej(a)redhat.com&gt;
- Reenable SMC NIC driver.
* Tue Jul 11 2006 Dave Jones <davej(a)redhat.com&gt;
- 2.6.17.4
- Disable split pagetable lock
* Sat Jul  8 2006 Juan Quintela <quintela(a)redhat.com&gt;
- enable CONFIG_CRASH on xen kernels.
- enable CONFIG_PCIDEV_BACKEND on xen kernels.
- make BLKDEV_FRONTEND a module on xen kernels.
- rebase with linux-2.6-xen-fedora 28918.
- Update to xen-unstable HV cset 10508.
- xen: credit scheduler is the default now.
* Wed Jul  5 2006 Dave Jones <davej(a)redhat.com&gt;
- Get rid of stack backtrace on panic, which in most
  cases actually caused a loss of info instead of a gain.
* Tue Jul  4 2006 Juan Quintela <quintela(a)redhat.com&gt;
- new merge with xen upstream.
- xen kernel don't require xen userland.
- new xen kernel (same as rawhide one) with PAE support.
- removed xen0-PAE & xenU-PAE (see xen kernel).
* Fri Jun 30 2006 Dave Jones <davej(a)redhat.com&gt;
- 2.6.17.3
- 2.6.17.2
- Fix the ALSA list_add bug.
* Mon Jun 26 2006 Dave Jones <davej(a)redhat.com&gt;
- Enable fake PCI hotplug driver. (#190437)
- Enable gameport/joystick on i586 builds. (#196581)
* Sat Jun 24 2006 Dave Jones <davej(a)redhat.com&gt;
- Enable profiling for 586 kernels.
* Fri Jun 23 2006 Dave Jones <davej(a)redhat.com&gt;
- Make 'quiet' work again.
* Tue Jun 20 2006 Dave Jones <davej(a)redhat.com&gt; [2.6.17-1.2139_FC5]
- Rebuild with slab debug off.
* Tue Jun 20 2006 Dave Jones <davej(a)redhat.com&gt; [2.6.17-1.2138_FC5]
- 2.6.17.1
* Sun Jun 18 2006 Dave Jones <davej(a)redhat.com&gt;
- 2.6.17
- Only print info about SMP alternatives on SMP kernels.
* Tue Jun  6 2006 Dave Jones <davej(a)redhat.com&gt; [2.6.16-1.2133_FC5]
- Add a PPC64 kdump kernel.
* Mon Jun  5 2006 Dave Jones <davej(a)redhat.com&gt; [2.6.16-1.2132_FC5]
- 2.6.16.20
* Thu Jun  1 2006 Dave Jones <davej(a)redhat.com&gt;
- Reenable Xen builds.
* Tue May 30 2006 Dave Jones <davej(a)redhat.com&gt;
- 2.6.16.19
* Sun May 28 2006 Dave Jones <davej(a)redhat.com&gt;
- Fix unresolved symbol. (#193333)
* Sat May 27 2006 Dave Jones <davej(a)redhat.com&gt;
- Improve list corruption debugging patch.
* Fri May 26 2006 Dave Jones <davej(a)redhat.com&gt;
- Remove xenU initrd's when kernel is removed.
* Fri May 26 2006 Juan Quintela <quintela(a)redhat.com&gt;
- Remove ARCH=xen reminiscences on spec file

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/5/

6249805e076907e35b4175169311bb6b65fd6e9a  SRPMS/kernel-2.6.17-1.2159_FC5.src.rpm
6249805e076907e35b4175169311bb6b65fd6e9a  noarch/kernel-2.6.17-1.2159_FC5.src.rpm
7e9a60142129c9d431f5f5137669f154e6bbfdb1  ppc/kernel-smp-2.6.17-1.2159_FC5.ppc.rpm
b214dba53b75d924e8c7606127fa928e7ddefd73 
ppc/debug/kernel-debuginfo-2.6.17-1.2159_FC5.ppc.rpm
1336d3ae1b50e99711cf7f9e9e0af3070a8205c0  ppc/kernel-smp-devel-2.6.17-1.2159_FC5.ppc.rpm
1b49366e14f615e00be89a12a05512d51aaa19eb  ppc/kernel-devel-2.6.17-1.2159_FC5.ppc.rpm
11b424b4f82fb8ce969f63886a7b9ec4b6335e73  ppc/kernel-2.6.17-1.2159_FC5.ppc.rpm
ce7ac8192d545ecfa941c57c01504d763f996240  ppc/kernel-doc-2.6.17-1.2159_FC5.noarch.rpm
80a8286a7628da2f8a2276c4be41000aaa31a655 
x86_64/kernel-xenU-devel-2.6.17-1.2159_FC5.x86_64.rpm
9879a5ee6ef050eff5799eacab6bfd0b1272697f  x86_64/kernel-xen0-2.6.17-1.2159_FC5.x86_64.rpm
4b9a588f850ff13ef2228f4a041a60bcf3f4c2cd 
x86_64/kernel-kdump-devel-2.6.17-1.2159_FC5.x86_64.rpm
a3398444fe35a709badbc4890c72de3311d10c11 
x86_64/debug/kernel-debuginfo-2.6.17-1.2159_FC5.x86_64.rpm
484f7c705deb8efcea225a3848dcc390522b74f6  x86_64/kernel-xenU-2.6.17-1.2159_FC5.x86_64.rpm
d63a22c01263be12a09ce8b0409da1acc82710e8 
x86_64/kernel-xen-devel-2.6.17-1.2159_FC5.x86_64.rpm
50c3dde2fb3c1a72ac2b1ee904c3caa67d3063f1  x86_64/kernel-xen-2.6.17-1.2159_FC5.x86_64.rpm
646e64038c55bc29d893cdc02c1266bff1538a30 
x86_64/kernel-kdump-2.6.17-1.2159_FC5.x86_64.rpm
e8451d477703202bebce5f0b560d6c5a1904b231  x86_64/kernel-2.6.17-1.2159_FC5.x86_64.rpm
1d3439b6038daa6075b6a114ba6521607c04823a 
x86_64/kernel-devel-2.6.17-1.2159_FC5.x86_64.rpm
a118b3aa9da0dbaa4d92e334c148008d67f9795e 
x86_64/kernel-xen0-devel-2.6.17-1.2159_FC5.x86_64.rpm
ce7ac8192d545ecfa941c57c01504d763f996240  x86_64/kernel-doc-2.6.17-1.2159_FC5.noarch.rpm
b37dc331f292e6d7b11c7f9f0f733225c32997fc 
i386/debug/kernel-debuginfo-2.6.17-1.2159_FC5.i586.rpm
11bd0a4b2432f1a3587539f6be4f02c764e1bf13  i386/kernel-devel-2.6.17-1.2159_FC5.i586.rpm
aae32e654885092bd94de8196107a53ffbf54556  i386/kernel-2.6.17-1.2159_FC5.i586.rpm
d25f5148180fba722a663f38971f1bea990baf16  i386/kernel-kdump-2.6.17-1.2159_FC5.i686.rpm
473d2c268c02df0573052f4bf201c77e101ed48e  i386/kernel-xen0-2.6.17-1.2159_FC5.i686.rpm
5037b00eb311128a6b43a03da0d188802cba3d78 
i386/kernel-kdump-devel-2.6.17-1.2159_FC5.i686.rpm
c926790fa0687e00199186f3674a633551efb1a8 
i386/kernel-xenU-devel-2.6.17-1.2159_FC5.i686.rpm
86b6d153a7eb5bb3cf3edaf7d1901b0841ab343f 
i386/kernel-xen-devel-2.6.17-1.2159_FC5.i686.rpm
e2214554e682c3ea129b5d71ba5b324c1eaf6029  i386/kernel-xenU-2.6.17-1.2159_FC5.i686.rpm
47e21600ea41f22f827660155bd9571123a89402 
i386/debug/kernel-debuginfo-2.6.17-1.2159_FC5.i686.rpm
6b0c1afbf2662d3c6fd5de9b084a51a70b7a1011  i386/kernel-devel-2.6.17-1.2159_FC5.i686.rpm
86087fec1fe076832e76be26898e5dda6c888bf6 
i386/kernel-xen0-devel-2.6.17-1.2159_FC5.i686.rpm
3cd720d17c5c06362628731ce78bb2e8e47db736  i386/kernel-2.6.17-1.2159_FC5.i686.rpm
4310f73a623fcfdf527d513f887e64d4cf43b37f  i386/kernel-xen-2.6.17-1.2159_FC5.i686.rpm
a2c59026400bf65aeb809ee49bb48161a13b4b75 
i386/kernel-smp-devel-2.6.17-1.2159_FC5.i686.rpm
28a826b3e8563cd16793e0405e8d4e00f59ac534  i386/kernel-smp-2.6.17-1.2159_FC5.i686.rpm
ce7ac8192d545ecfa941c57c01504d763f996240  i386/kernel-doc-2.6.17-1.2159_FC5.noarch.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------

[Gilboa Davara]

On Mon, 2006-07-17 at 16:02 -0400, Dave Jones wrote:
> ---------------------------------------------------------------------
>  Fedora Test Update Notification
>  FEDORA-2006-816
>  2006-07-17
>  ---------------------------------------------------------------------
>  
>  Product     : Fedora Core 5
>  Name        : kernel
>  Version     : 2.6.17
>  Release     : 1.2159_FC5
>  Summary     : The Linux kernel (the core of the Linux operating system)
>  Description :
>  The kernel package contains the Linux kernel (vmlinuz), the core of any
>  Linux operating system.  The kernel handles the basic functions
>  of the operating system:  memory allocation, process allocation, device
>  input and output, etc.
>  
>  ---------------------------------------------------------------------
>  Update Information:
>  
>  Update to 2.6.17.6, which fixes a local root vulnerability
>  in the /proc filesystem. This vulnerability isn't thought to
>  be possible to exploit on Fedora systems with SELinux enabled.
>  Additionally, the exploit for this vulnerability relies upon
>  a.out support, which the Fedora kernel has disabled.
>  Regardless, this update has been made available in case
>  other attack vectors become apparent.
>  ---------------------------------------------------------------------
>  * Sun Jul 16 2006 Dave Jones <davej(a)redhat.com&gt;
>  - 2.6.17.6
>  * Fri Jul 14 2006 Dave Jones <davej(a)redhat.com&gt;
>  - Reenable SMC NIC driver.
>  * Tue Jul 11 2006 Dave Jones <davej(a)redhat.com&gt;
>  - 2.6.17.4
>  - Disable split pagetable lock
>  * Sat Jul  8 2006 Juan Quintela <quintela(a)redhat.com&gt;
>  - enable CONFIG_CRASH on xen kernels.
>  - enable CONFIG_PCIDEV_BACKEND on xen kernels. 
Yey!!!!
Yippie!

I'll test it ASAP...!

Gilboa

[Farkas Levente]

Dave Jones wrote:
> ---------------------------------------------------------------------
>  Fedora Test Update Notification
>  FEDORA-2006-816
>  2006-07-17
>  ---------------------------------------------------------------------
>  
>  Product     : Fedora Core 5
>  Name        : kernel
>  Version     : 2.6.17
>  Release     : 1.2159_FC5
>  Summary     : The Linux kernel (the core of the Linux operating system)
>  Description :
>  The kernel package contains the Linux kernel (vmlinuz), the core of any
>  Linux operating system.  The kernel handles the basic functions
>  of the operating system:  memory allocation, process allocation, device
>  input and output, etc.
>  
>  ---------------------------------------------------------------------
>  Update Information:
>  
>  Update to 2.6.17.6, which fixes a local root vulnerability
>  in the /proc filesystem. This vulnerability isn't thought to
>  be possible to exploit on Fedora systems with SELinux enabled.
>  Additionally, the exploit for this vulnerability relies upon
>  a.out support, which the Fedora kernel has disabled.
>  Regardless, this update has been made available in case
>  other attack vectors become apparent.
>  --------------------------------------------------------------------- 
still not boot on my system and hang after "redhat nash version..." the
latest version was 1.2133 which is still boot none of the later
versions:-( any change to be able to get a new kernel which is working.
afais there are many bugzilla entry about it.


-- 
  Levente                               "Si vis pacem para bellum!"

[Adam Pribyl]

>  still not boot on my system and hang after "redhat nash version..." the
>  latest version was 1.2133 which is still boot none of the later
>  versions:-( any change to be able to get a new kernel which is working.
>  afais there are many bugzilla entry about it.
>  
I also have several reports with this problem. Anything past 2133 is not 
working and hangs. DOes anybody identified what is wrong?

>  --
>   Levente                               "Si vis pacem para bellum!"
>  
Adam Pribyl

[dragoran]

Dave Jones wrote:
> ---------------------------------------------------------------------
>  Fedora Test Update Notification
>  FEDORA-2006-816
>  2006-07-17
>  ---------------------------------------------------------------------
>
>  Product     : Fedora Core 5
>  Name        : kernel
>  Version     : 2.6.17
>  Release     : 1.2159_FC5
>  Summary     : The Linux kernel (the core of the Linux operating system)
>  Description :
>  The kernel package contains the Linux kernel (vmlinuz), the core of any
>  Linux operating system.  The kernel handles the basic functions
>  of the operating system:  memory allocation, process allocation, device
>  input and output, etc.
>
>  ---------------------------------------------------------------------
>  Update Information:
>
>  Update to 2.6.17.6, which fixes a local root vulnerability
>  in the /proc filesystem. This vulnerability isn't thought to
>  be possible to exploit on Fedora systems with SELinux enabled.
>  Additionally, the exploit for this vulnerability relies upon
>  a.out support, which the Fedora kernel has disabled.
>  Regardless, this update has been made available in case
>  other attack vectors become apparent.
>     
because this vulnerability does not effect FC systems can you wait until 
2.6.17.7 is out, before pushing this to updates? there will be many 
patches (bugfixes) in it.

[Dave Jones]

On Tue, Jul 18, 2006 at 01:49:55PM +0200, dragoran wrote:
>  because this vulnerability does not effect FC systems can you wait
> until 
>  2.6.17.7 is out, before pushing this to updates? there will be many 
>  patches (bugfixes) in it. 
That's the plan.

		Dave

-- 
http://www.codemonkey.org.uk

[dragoran]

Dave Jones wrote:
>  On Tue, Jul 18, 2006 at 01:49:55PM +0200, dragoran wrote:
>   > because this vulnerability does not effect FC systems can you wait until 
>   > 2.6.17.7 is out, before pushing this to updates? there will be many 
>   > patches (bugfixes) in it.
>
>  That's the plan.
>
>     
its out ;)
>  		Dave
>
>