Kernel downgrade?

PreguntoYo · 03-19-2014, 07:18 AM

Hello:

I'm a little behind in following Slackware Security Advices (and this forum), but I'm trying to catch up.

After a:

Code:

slackpkg update
slackpkg upgrade-all

I found that I had to upgrade kernel files, which is something that I always approach carefully.

Slackpkg reports that I have kernel 3.10.17-3 files installed in my Slackware64-14.1 system, and wants to upgrade (?) to 3.10.17-...2?.

Should it be like this or am I missing something?.

Thanks in advance.

Smokey_justme · 03-19-2014, 07:26 AM

It's a security patched kernel for Slackware 64-bit version...

Quote:

Originally Posted by changelog.txt

patches/packages/linux-3.10.17-2/*:
These are new kernels that fix CVE-2014-0038, a bug that can allow local
users to gain a root shell.
Be sure to reinstall LILO (run "lilo" as root) after upgrading the kernel
packages, or on UEFI systems, copy the appropriate kernel to
/boot/efi/EFI/Slackware/vmlinuz).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename...=CVE-2014-0038
(* Security fix *)

I think the -2 was just a mistake when rebuilding building the kernel..
LE: Actually, after actually reading more carefully the last link on this post, I think it supposed to mean that the second build of the patch worked, Pat (or whoever did the build) simply didn't start from 4 :P... Or this is my oppinion.. Either way, it's irrelevant...

So, yes, do the upgrade, it's actually important (see discussions from post 33 and further on here: http://www.linuxquestions.org/questi...800/page3.html)