hardened-sources wrt CVE-2014-3153 and CVE-2014-0196
"Anthony G. Basile" <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
Hi everyone, This is one of those rare situations where there are enough serious bugs against the kernel that we may have to rapid stabilize hardened-sources-3.2.59-r5 and 3.14.5-r2. These are currently marked ~ because I need feedback from users. So please try to upgrade to either one (3.2 is preferred for mission critical) and give me feedback. The only caution is do not enable KSTACKOVERFLOW, a new option which is know to cause panics, eg virtio iface. Within the next few days I will mark those stable if they pass. And a few days later I will start to prune the older stables that are susceptible to 3153. A note to what ~ means. ~ does not mean "unstable". I know that we say a package on an arch is "stable" when we remove the ~, but adding the ~ doesn't make it "unstable". It means its of an unknown state. So please read ~ as "test me!" The kernel is unlike most packages in that it is vast and at any given time has dozens of bugs or other problems. You'll never have a prefect kernel, only one that is "good enough". I will only know its "good enough" if you don't complain. And you complain via bugs so that when my spider senses suggest its time for a new kernel, i look through the bugs and see which one is "good enough". -- Anthony G. Basile, Ph. D. Chair of Information Technology D'Youville College Buffalo, NY 14201 (716) 829-8197