When will at least Linux 3.10.29 be released on Slackware stable due to security

Bindestreck · 02-11-2014, 05:13 AM

As topic,

There are many security fixes as in this root exploit: http://seclists.org/oss-sec/2014/q1/187, which was fixed in Linux 3.10.29...

Should it not be considered to release a newer linux kernel soon to Slackware 14.1?

wildwizard · 02-11-2014, 05:21 AM

Not required due to an accident :-
http://www.linuxquestions.org/questi...ml#post5108933

Bindestreck · 02-11-2014, 05:23 AM

mancha says:

"On the other hand, the recent high-profile x32 ABI vulnerability that can be leveraged to gain root privileges (CVE-2014-0038)
does affect Slackware 14.1/current on 64-bit platforms."

guanx · 02-11-2014, 06:26 AM

There will be no difference if you build Linux 3.10.29 by yourself. Just have a look under "slackware-14.1/source/k/".

Bindestreck · 02-11-2014, 11:03 AM

Well I understand, I did not mean to sound arrogant or something, just curious why not upgrading the kernel due to that kind of vulnerable security issue, is it because of lack of time, too much effort to rebuild the kernel or some other reason?

Peace!

(I have upgraded the kernel to 3.13.2 by now due to improved SSD support ...)

metaschima · 02-11-2014, 11:11 AM

Quote:

Originally Posted by wildwizard

Not required due to an accident :-
http://www.linuxquestions.org/questi...ml#post5108933

Keep reading and you'll see that it can be exploited.

I believe that the fix will be released at some point. However, it doesn't affect me because I run a custom kernel and it is the latest LTS kernel.

dugan · 02-11-2014, 12:10 PM

My advice would be to ask Pat directly.