LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 02-21-2019, 09:53 AM   #1201
GazL
LQ Guru
 
Registered: May 2008
Posts: 5,035
Blog Entries: 16

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657

Yeah I've seen some talk about a use-after-free local priv escalation vulnerability via the crypto API, so that may be one to keep an eye on.
 
Old 02-21-2019, 09:57 AM   #1202
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Quote:
Originally Posted by GazL View Post
Yeah I've seen some talk about a use-after-free local priv escalation vulnerability via the crypto API, so that may be one to keep an eye on.
IF we are talking about the same thing, it is CVE-2019-8912. I've just searched through the forth coming patches and did not find anything relating to that number, but this may be it?

Quote:
KASAN has found use-after-free in sockfs_setattr.
The existed commit 6d8c50dcb029 ("socket: close race condition between sock_close()
and sockfs_setattr()") is to fix this simillar issue, but it seems to ignore
that crypto module forgets to set the sk to NULL after af_alg_release.

KASAN report details as below:
BUG: KASAN: use-after-free in sockfs_setattr+0x120/0x150
Write of size 4 at addr ffff88837b956128 by task syz-executor0/4186
http://lkml.iu.edu/hypermail/linux/k...2.2/05010.html

It is listed for the forthcoming 4.20.12, 4.19.25 and 4.14.103 updates.

Last edited by cwizardone; 02-21-2019 at 10:09 AM.
 
3 members found this post helpful.
Old 02-21-2019, 10:01 AM   #1203
GazL
LQ Guru
 
Registered: May 2008
Posts: 5,035
Blog Entries: 16

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
Yes, that's the one. Thanks.

Last edited by GazL; 02-21-2019 at 10:10 AM.
 
2 members found this post helpful.
Old 02-23-2019, 04:20 AM   #1204
mats_b_tegner
Member
 
Registered: Nov 2009
Location: Gothenburg, Sweden
Distribution: Slackware64
Posts: 531

Rep: Reputation: 316Reputation: 316Reputation: 316Reputation: 316
Kernels 4.20.12, 4.19.25, 4.14.103, 4.9.160, 4.4.176 and 3.18.136[EOL] are out now
https://cdn.kernel.org/pub/linux/ker...ngeLog-4.20.12
https://cdn.kernel.org/pub/linux/ker...ngeLog-4.19.25
https://cdn.kernel.org/pub/linux/ker...geLog-4.14.103
https://cdn.kernel.org/pub/linux/ker...ngeLog-4.9.160
https://cdn.kernel.org/pub/linux/ker...ngeLog-4.4.176
https://cdn.kernel.org/pub/linux/ker...geLog-3.18.136

Last edited by mats_b_tegner; 02-23-2019 at 09:30 AM.
 
4 members found this post helpful.
Old 02-23-2019, 06:51 AM   #1205
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Dave's Unofficial Slackbuilt Kernel update for the 4.4.y series
can be found at, https://dusk.idlemoor.tk
 
1 members found this post helpful.
Old 02-24-2019, 06:59 PM   #1206
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
5.0-rc8
The newest "mainline" kernel, version 5.0-rc8, has been been made available for testing.

The tarball, https://git.kernel.org/torvalds/t/linux-5.0-rc8.tar.gz

Mr. Torvalds' announcement, http://lkml.iu.edu/hypermail/linux/k...2.3/00174.html

Quote:
This may be totally unnecessary, but we actually had more patches come
in this last week than we had for rc7, which just didn't make me feel
the warm and fuzzies. And while none of the patches looked all that
scary, some of them were to pretty core files, so it wasn't all just
random rare drivers (although those kinds also existed).

So I agonized about it a bit, and then decided to just say "no hurry"
and make an rc8. And after I had tagged the rc, I noticed a patch in
my inbox that I had missed that was a regression from one of the very
patches this last week, so that made me feel like rc8 was the right
decision.

Anyway, maybe I should have just checked my email more carefully, and
maybe I'm just being unnecessarily worried. I could have just untagged
the rc release (it hadn't actually gone public when I noticed),
applied the missing patch, and called it good. But instead I took it
as confirmation that we should bake this thing one more week.

Confirmation bias? Maybe. Because while rc8 is bigger than rc7, it's
not *hugely* so, and none of the changes look all that controversial.
About 30% drivers (gpu, net, rdma, sound, scsi..), 20% networking, and
the rest is arch updates, some mm fixes, some key handling fixes,
filesystem, include files..

But on the whole I just felt happier with an extra rc than worrying
about things.

Shortlog appended for some flavor of the details.

Linus

---

Last edited by cwizardone; 02-24-2019 at 07:08 PM.
 
3 members found this post helpful.
Old 02-25-2019, 04:01 PM   #1207
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Another round of kernel updates has been scheduled for release Wednesday evening, GMT/UTC.

Last edited by cwizardone; 02-25-2019 at 04:04 PM.
 
Old 02-27-2019, 06:46 AM   #1208
teoberi
Member
 
Registered: Jan 2018
Location: Romania
Distribution: Slackware64-current (servers) / Ubuntu (workstations)
Posts: 92

Rep: Reputation: 34
Kernel 4.19.26
 
1 members found this post helpful.
Old 02-27-2019, 07:39 AM   #1209
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Kernel updates 4.20.13, 4.19.26, 4.14.104 and 4.9.161 are now available at

https://www.kernel.org/

The change logs,

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.20.13

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.19.26

https://cdn.kernel.org/pub/linux/ker...geLog-4.14.104

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.9.161

Last edited by cwizardone; 02-27-2019 at 07:41 AM.
 
5 members found this post helpful.
Old 03-03-2019, 07:04 PM   #1210
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
5.0

The newest Stable Kernel, version 5.0, has been released.

The tarball, https://cdn.kernel.org/pub/linux/ker...nux-5.0.tar.xz

Mr. Torvalds' announcement,

http://lkml.iu.edu/hypermail/linux/k...3.0/01288.html

Quote:
Linux 5.0
From: Linus Torvalds
Date: Sun Mar 03 2019 - 19:43:23 EST

Ok, so the last week of the 5.0 release wasn't entirely quiet, but
it's a lot smaller than rc8 was, and on the whole I'm happy that I
delayed a week and did an rc8.

It turns out that the actual patch that I talked about in the rc8
release wasn't the worrisome bug I had thought: yes, we had an
uninitialized variable, but the reason we hadn't immediately noticed
it due to a warning was that the way gcc works, the compiler had
basically initialized it for us to the right value. So the same thing
that caused not the lack of warning, also effectively meant that the
fix was a no-op in practice.

But hey, we had other bug fixes come in that actually did matter, and
the uninitialized variable _could_ have been a problem with another
compiler.

Regardless - all is well that ends well. We have more than a handful
of real fixes in the last week, but not enough to make me go "Hmm,
things are really unstable". In fact, at least two thirds of the
patches are marked as being fixes for previous releases, so it's not
like 5.0 itself looks bad.

Knock wood.

Anyway, with this, the merge window for 5.1 is obviously open, and I'm
happy to see that I already have several early pull requests. Which
I'll start processing tomorrow.

And appended is - as usual - the shortlog just for the last week. The
overall changes for all of the 5.0 release are much bigger. But I'd
like to point out (yet again) that we don't do feature-based releases,
and that "5.0" doesn't mean anything more than that the 4.x numbers
started getting big enough that I ran out of fingers and toes.

Linus

---

Last edited by cwizardone; 03-04-2019 at 07:06 AM.
 
8 members found this post helpful.
Old 03-04-2019, 08:42 AM   #1211
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Another round of kernel updates has been scheduled for release Wednesday morning, GMT/UTC.
 
Old 03-04-2019, 03:56 PM   #1212
mralk3
Senior Member
 
Registered: May 2015
Location: Utah, USA
Distribution: Slackware 14.2 || Slackware-current && CentOS
Posts: 1,372

Rep: Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737
I wish I had some newer hardware so I had a reason to try out 5.0. Thanks for the updates, cwizardone.
 
1 members found this post helpful.
Old 03-04-2019, 04:31 PM   #1213
GazL
LQ Guru
 
Registered: May 2008
Posts: 5,035
Blog Entries: 16

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
Linux version 5.0.0-local (build@ws1) (gcc version 8.3.0 (GCC)) #1 SMP PREEMPT Mon Mar 4 11:43:59 GMT 2019

Seems ok, so far.

I even enabled the newly included terminus-32 console font.
It's a little bit big on my 100dpi laptop screen, but I'll take that over it being too small. Gives me 85x24, which is more or less the same as the old-school terminals would give you, and it'll do nicely until rc.font gets a chance to run.
 
1 members found this post helpful.
Old 03-04-2019, 08:14 PM   #1214
AlleyTrotter
Member
 
Registered: Jun 2002
Location: Coal Township PA
Distribution: Slackware64-14.2 (5.2.1) UEFI enabled (LFS-8.4 when Slackware becomes too easy)
Posts: 539

Rep: Reputation: 198Reputation: 198
Quote:
Originally Posted by GazL View Post
Seems ok, so far.
running fine here also.
john
 
1 members found this post helpful.
Old 03-05-2019, 12:15 PM   #1215
cwizardone
Senior Member
 
Registered: Feb 2007
Distribution: Slackware64-current with "True Multilib" & Xfce.
Posts: 4,769

Original Poster
Blog Entries: 1

Rep: Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145Reputation: 2145
Kernel updates 4.20.14, 4.19.27, 4.14.105 and 4.9.162 are now available at

https://www.kernel.org/

The change logs,

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.20.14

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.19.27

https://cdn.kernel.org/pub/linux/ker...geLog-4.14.105

https://cdn.kernel.org/pub/linux/ker...ngeLog-4.9.162

Last edited by cwizardone; 03-05-2019 at 12:16 PM.
 
2 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux.conf.au: Latest Linux kernel release due early March DragonSlayer48DX Linux - News 0 01-18-2010 10:43 PM
No video on latest kernel release Tralce Linux - Kernel 3 11-30-2006 07:48 AM
What is the latest Redhat release TILEMANN Linux - Software 5 11-20-2006 10:48 PM
LXer: News: OpenVZ To Release Support, Patches for Latest Kernel LXer Syndicated Linux News 0 11-01-2006 10:54 PM
latest debian release? doralsoral Linux - Software 5 12-25-2004 12:40 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 08:21 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration