Re: [gentoo-dev] Kernel 2.4.20

[Chris Gianelloni <wolf31o2@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1169 bytes --]

On Tue, 2003-08-05 at 10:08, Philippe Lafoucrière wrote:
> Hi all,
> 
> The stable kernel in portage is currently 2.4.20-r5, but the current
> "stable" kernel is 2.4.21. And if you look a this :
> 
> http://www.securityfocus.com/archive/1/330888
> 
> There is an exploit in kernels < 2.4.21. We definitely should upgrade
> our kernel version.

Simply emerge vanilla-sources, pfeifer-sources, gs-sources, or any
number of other non-2.4.20 sources in portage.

The problem with 2.4.20 is only in netfilter code which isn't required. 
We are aware of the bug in the 2.4.20 kernel and are diligently working
on a solution.  There is currently a "beta" gentoo-sources, by the way
of pfeifer-sources, available.  Unfortunately, the gentoo-sources is a
VERY complex beast consisting of multiple patches which all have to be
ported to a new kernel version and regression tested to ensure there is
no breakage.  If you are concerned about the security of your system,
you should use a kernel other than gentoo-sources on any
Internet-accessible machines or not enable this feature of the netfilter
code.

-- 
Chris Gianelloni
Developer, Gentoo Linux

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]