hardened-sources wrt CVE-2014-3153 and CVE-2014-0196

"Anthony G. Basile" <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
Hi everyone,

This is one of those rare situations where there are enough serious bugs 
against the kernel that we may have to rapid stabilize 
hardened-sources-3.2.59-r5 and 3.14.5-r2.  These are currently marked ~ 
because I need feedback from users.  So please try to upgrade to either 
one (3.2 is preferred for mission critical) and give me feedback.  The 
only caution is do not enable KSTACKOVERFLOW, a new option which is know 
to cause panics, eg virtio iface.

Within the next few days I will mark those stable if they pass.  And a 
few days later I will start to prune the older stables that are 
susceptible to 3153.

A note to what ~ means.  ~ does not mean "unstable".  I know that we say 
a package on an arch is "stable" when we remove the ~, but adding the ~ 
doesn't make it "unstable".  It means its of an unknown state.  So 
please read ~ as "test me!"  The kernel is unlike most packages in that 
it is vast and at any given time has dozens of bugs or other problems. 
You'll never have a prefect kernel, only one that is "good enough".  I 
will only know its "good enough" if you don't complain.  And you 
complain via bugs so that when my spider senses suggest its time for a 
new kernel, i look through the bugs and see which one is "good enough".

-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.