LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 06-17-2004, 09:50 AM   #1
proendo
LQ Newbie
 
Registered: Jan 2004
Posts: 15

Rep: Reputation: 0
Linux 2.4.22 , slackware 9.1.0


I have been running a firewall off this Linux 2.4.22 , slackware 9.1.0 box.

Its was a very basic install with almost nothing extra installed and nothing runing on the box except ssh.

Its been running great for 124 days with not one problem.

My question is,

Should I be addressing any security/kernel/software updates at this time? I read over slackware.com secruity updates and it doesnt seem any of the 2004 list applies to me.

Any recommendations for this newb?

Proendo.
 
Old 06-17-2004, 09:56 AM   #2
czarherr
Member
 
Registered: Sep 2003
Location: Suwon, Korea
Distribution: Slackware 14
Posts: 288

Rep: Reputation: 32
I would consider upgrading to 2.4.26 to take care of that mremap() issue, and just regular patches to things like sendmail and apache, nothing drastic, though
 
Old 06-17-2004, 09:57 AM   #3
Nis
Member
 
Registered: Jul 2003
Location: Virginia
Distribution: Ubuntu Hoary (5.04)
Posts: 550

Rep: Reputation: 31
Yes you should. It's not likely that one of the kernel security updates would really affect you, but it is so easy that there really isn't any reason not to. Just download the latest kernel-headers, -ide, -modules, and -source packages and upgradepkg them. Run lilo and reboot. Easy. ssh uses OpenSSL (at least I think so) and it is definitely a good idea to upgrade those packages. Everything else should be okay since you're not running a web or email server.
 
Old 06-17-2004, 10:29 AM   #4
proendo
LQ Newbie
 
Registered: Jan 2004
Posts: 15

Original Poster
Rep: Reputation: 0
Could you possibly link me to the exact

kernel-headers, -ide, -modules, and -source packages

That you would download for this box?


I want to be sure I am getting the correct files.

Thanks,

Proendo.
 
Old 06-17-2004, 11:33 AM   #5
Nis
Member
 
Registered: Jul 2003
Location: Virginia
Distribution: Ubuntu Hoary (5.04)
Posts: 550

Rep: Reputation: 31
Sure. Here is the listings from the Slackware package browser. Just follow the links to a description and a link to download. The upgradepkg these, run lilo, and reboot. You'll also need the alsa-driver package compiled for this kernel so it would be a good idea to get that as well. Just search the package browser using current.
 
Old 06-17-2004, 12:03 PM   #6
SBing
Member
 
Registered: Mar 2004
Posts: 519

Rep: Reputation: 35
@proendo

You should probably check out the slackware security advisories - or sign up to the mailing list.

If you go to the date just after slackware 9.1 was released, (in 2003), you can look through all the security patches released. It isn't IMPERATIVE that you install these if you're a home user behind a router with no forwarded ports, but if you are running a server of any kind, it is best really to update with the approriate patches

Good luck

Steve
 
Old 06-17-2004, 03:19 PM   #7
proendo
LQ Newbie
 
Registered: Jan 2004
Posts: 15

Original Poster
Rep: Reputation: 0
I downloaded these files loged on as root

kernel-ide-2.4.26-i486-4
kernel-modules-2.4.26-i486-2
kernel-headers-2.4.26-i386-3
kernel-source-2.4.26-noarch-4

I got as far as

upgradepkg kernel-ide-2.4.26-i486-4
upgradepkg kernel-modules-2.4.26-i486-2
upgradepkg kernel-headers-2.4.26-i386-3

When I try and

upgradepkg kernel-source-2.4.26-noarch-4

I get

Error: there is no installed package named kernel-source-2.4.26-noarch-4.
(looking for /var/log/packages/kernel-source-2.4.26-noarch-4)


I am sure since this is my first time you will chuckle and say you cant use the "upgradepackg" command on the kernel-source!

Whats Next?

Proendo.
 
Old 06-17-2004, 03:26 PM   #8
keefaz
LQ Guru
 
Registered: Mar 2004
Distribution: Slackware
Posts: 6,552

Rep: Reputation: 872Reputation: 872Reputation: 872Reputation: 872Reputation: 872Reputation: 872Reputation: 872
When I get this error I usually run installpkg thePackage.tgz and it will install it
 
Old 06-17-2004, 03:31 PM   #9
SBing
Member
 
Registered: Mar 2004
Posts: 519

Rep: Reputation: 35
Yeh, I assume when you installed slackware that you did not install the kernel-source package, (I didn't either, I still don't know what it is useful for, somebody tell me please!) so you can't _upgrade_ the package, you must _install_ it :)

Remember to run lilo once you're done!

Steve
 
Old 06-17-2004, 03:52 PM   #10
proendo
LQ Newbie
 
Registered: Jan 2004
Posts: 15

Original Poster
Rep: Reputation: 0
Thanks for the quick response ... the installpkg command made a bit of difference :-)

After it installed fine I typed LILO.

It returned a response

Added Linux *

Ok to reboot now?
 
Old 06-17-2004, 06:03 PM   #11
Noryungi
Member
 
Registered: Jul 2003
Location: --> X <-- You are here.
Distribution: Slackware, OpenBSD
Posts: 305

Rep: Reputation: 53
If LILO is happy, so should you!

Yes, reboot your machine and everything should be OK.
 
Old 06-18-2004, 12:43 AM   #12
czarherr
Member
 
Registered: Sep 2003
Location: Suwon, Korea
Distribution: Slackware 14
Posts: 288

Rep: Reputation: 32
Quote:
Originally posted by SBing
Yeh, I assume when you installed slackware that you did not install the kernel-source package, (I didn't either, I still don't know what it is useful for, somebody tell me please!) so you can't _upgrade_ the package, you must _install_ it

Remember to run lilo once you're done!

Steve
The source is necessary when youre compiling driver modules and compiling various programs against a specific kernel. For example, Video card drivers often require the source to build their modules. It is also necessary if you need to recompile your kernel (and you do!)
 
Old 06-18-2004, 02:12 AM   #13
SBing
Member
 
Registered: Mar 2004
Posts: 519

Rep: Reputation: 35
Ah

Cheers for that, that's probably why we've never needed it on our servers - video drivers are the least important thing

I guess on a home PC it is important, - anyway, cheers again

Steve
 
Old 06-18-2004, 10:58 AM   #14
proendo
LQ Newbie
 
Registered: Jan 2004
Posts: 15

Original Poster
Rep: Reputation: 0
Everything went good with the upgrade.

For Updates I have done.

2004-03-17 - [slackware-security] OpenSSL security update (SSA:2004-077-01)
openssl-0.9.7d-i486-1.tgz
openssl-solibs-0.9.7d-i486-1.tgz

Slackware-Current Kernel Updates
kernel-ide-2.4.26-i486-4
kernel-modules-2.4.26-i486-2
kernel-headers-2.4.26-i386-3
kernel-source-2.4.26-noarch-4

One note is that upon doing lilo and the reboot the section in my etc /rc.d/rc.local script that states "dhcpcd eth1" did not seem to pick up the proper info.

I could not resolve any public ip's from client machines. When I did an ifconfig on the slackware box I noticed 192.168.100.1 addresses on eth1 plus in the resolv.conf the info for my 5meg cable connection from my provider were not inputed, It simply put in nameserver 192.168.100.1

Well I shut of the modem thinking it was the prob and also rebooted the slackware box.

Still the same thing.

I went away from it for about 30 min and came back and it had renewed the proper dhcp information.

I have never seen this sort of latency. Usally when the system would reboot it would simply obtain the information at startup.

Must be provider realted. Unless I am missing something?

ANyway my main question is....

Aside from the updates above I installed how does one tell from 2003 and 2004 which updates one needs with my 2.4.26 updated kernel

Perhaps you can quickly check mark the ones I may need for a very basic install of slackware, it is simply acting as a internet router.


slackware-security: 2004

2004-06-15 - [slackware-security] kernel DoS (SSA:2004-167-01)
2004-06-09 - [slackware-security] cvs (SSA:2004-161-01)
2004-06-02 - [slackware-security] mod_ssl (SSA:2004-154-01)
2004-06-02 - [slackware-security] PHP local security issue (SSA:2004-154-02)
2004-05-19 - [slackware-security] cvs (SSA:2004-140-01)
2004-05-18 - [slackware-security] kdelibs (SSA:2004-238-01)
2004-05-17 - [slackware-security] mc (SSA:2004-136-01)
2004-05-12 - [slackware-security] apache (SSA:2004-133-01)
2004-05-04 - [slackware-security] lha update in bin package (SSA:2004-125-01)
2004-05-03 - [slackware-security] rsync update (SSA:2004-124-01)
2004-05-03 - [slackware-security] xine-lib update (SSA:2004-124-03)
2004-05-03 - [slackware-security] sysklogd update (SSA:2004-124-02)
2004-05-03 - [slackware-security] libpng update (SSA:2004-124-04)
2004-04-28 - [slackware-security] kernel security updates (SSA:2004-119-01)
2004-04-20 - [slackware-security] xine security update (SSA:2004-111-01)
2004-04-19 - [slackware-security] utempter security update (SSA:2004-110-01)
2004-04-18 - [slackware-security] cvs security update (SSA:2004-108-02)
2004-04-17 - [slackware-security] tcpdump denial of service (SSA:2004-108-01)
2004-03-17 - [slackware-security] OpenSSL security update (SSA:2004-077-01)
2004-02-18 - [slackware-security] metamail security update (SSA:2004-049-02)
2004-02-18 - [slackware-security] Kernel security update (SSA:2004-049-01)
2004-02-12 - [slackware-security] mutt security update (SSA:2004-043-01)
2004-02-12 - [slackware-security] XFree86 security update (SSA:2004-043-02)
2004-01-26 - [slackware-security] GAIM security update (SSA:2004-026-01)
2004-01-14 - [slackware-security] INN security update (SSA:2004-014-02)
2004-01-14 - [slackware-security] kdepim security update (SSA:2004-014-01)
2004-01-08 - [slackware-security] Slackware 8.1 kernel security update
2004-01-06 - [slackware-security] Kernel security update (SSA:2004-006-01)

slackware-security: 2003

2003-12-12 - [slackware-security] lftp security update (SSA:2003-346-01)
2003-12-11 - [slackware-security] cvs security update (SSA:2003-345-01)
2003-12-03 - [slackware-security] rsync security update (SSA:2003-337-01)
2003-12-02 - [slackware-security] minor advisory typo (SSA:2003-336-01b)
2003-12-02 - [slackware-security] Kernel security update (SSA:2003-336-01)
2003-11-04 - [slackware-security] apache security update (SSA:2003-308-01)
2003-10-27 - [slackware-security] gdm security update (SSA:2003-300-01)
2003-10-27 - [slackware-security] fetchmail security update (SSA:2003-300-02)
2003-09-30 - [slackware-security] OpenSSL security update (SSA:2003-273-01)

Last edited by proendo; 06-18-2004 at 02:54 PM.
 
Old 06-18-2004, 02:47 PM   #15
SBing
Member
 
Registered: Mar 2004
Posts: 519

Rep: Reputation: 35
Quote:
www.slackware.org
Slackware 9.1 is released 2003-09-26
Therefore you are NOT going to need security packages before that date.

Type:

su
pkgtool
"View"
...wait a few ticks...

Now - if you have a package and it's in the security update list, install it.

The ones you almost definately need are kernel updates and openssl updates (I think anyway)

Note, you don't need to install packages cumulatively, just install the latest patch. Just something to watch on kernels - make sure you have the right version of kernel-modules in line with the right version of kernel - I.E. when you install 2.4.27 (if and when!) make sure you install 2.4.27 modules

Steve
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
About Slackware 9.1 boot disk?? ftp://ftp.kpn.be/pub/linux/slackware/slackware-9.1-is AL3OMDAH Slackware 4 04-18-2007 09:54 AM
Controlling the fan in Slackware w/ Linux 2.6 or Linux 2.4 fader Slackware 7 02-01-2005 08:44 PM
Slackware LINUX help db85usa Linux - Newbie 16 05-31-2004 04:29 PM
linux slackware 9.1 paul62 Linux - Newbie 1 03-27-2004 09:12 PM
New to Slackware and or Linux Copytec Slackware 11 12-15-2003 03:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 06:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration