[Security-Discuss] Re: kernel-2.6.12.20.uc4mdk (SCTP conntrack fix).

Luiz Fernando N. Capitulino wrote:
>  Hi,
>
>  It seems that some people are triggering the CVE-2006-1527 (SCTP conntrack)
> bug. As we'll need a few days to release an official kernel update, I'm
> releasing the -20mdk final (which has the SCTP conntrack fix) as
> 2.6.12-20.uc4mdk.
>
>  If you are running a Mandriva 2006.0 kernel in a server machine running
> netfilter, I strongly recommend you to install this kernel. But keep in-mind
> that it's not fully tested yet.
>
>  For i386 it's already available at:
>
> http://distro2.conectiva.com.br/~lcapitulino/mdv_kernels/uc/2.6.12.20.uc4mdk/
>
>  and will be available for x86_64 in the next hours at:
>
> http://tmb.kkc.fi/Kernels/2006.0/x86_64/uc/2.6.12.20.uc4mdk/
>
>   

The x86_64 kernels are now uploaded and the needed mkinitrd & bootsplash 
is at :

http://tmb.kkc.fi/Kernels/2006.0/x86_64/uc/extra/


> NOTE: You will need a newer mkinitrd and bootsplash version to install
> this kernel on Mandriva 2006.0 installtions, you can get them at:
>
> http://distro2.conectiva.com.br/~lcapitulino/mdv_kernels/uc/extra/
>
>  or from cooker's repositories.
>
>  I think you'll also need dmraid from cooker for x86_64 installations.
>
>  Check the packages's changelog to get details about what have been
> changed.
>
>  Thanks,
>
>   

--
Regards

Thomas

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________