Subject: Re: [vserver] kernel last security update for centos 5
From: "Daniel Hokka Zakrisson" <daniel@hozac.com>
Date: Thu, 24 Apr 2008 12:23:52 +0200 (CEST)

Corey Wright wrote:
> On Thu, 24 Apr 2008 00:30:50 +0200 (CEST)
> "Daniel Hokka Zakrisson" <daniel@hozac.com> wrote:
>
>> jean-marc pouchoulon wrote:
>> > helo all,
>> >
>> > This is not really a vserver question, but I'm sure the guys on this
>> > list pay attention  on security Kernel.
>> >  is  2.6.22.19 vserver kernel for centos 5, provides on  dhozac RPM
>> > site  contains all the security fixes needed to be in a safe
>> > environment ? I guess the answer is yes but I need to be sure.
>>
>> I don't know what security fixes you are referring to, but as far as I
>> know are there no known issues with 2.6.22.19.
>
> i've been tracking oliver pinter's 2.6.22 git repositories (kernel source
> tree [1] & patches [2]).  his 2.6.22.20 & 2.6.22.21 releases seem to only
> include bugfixes [3] [4], but his 2.6.22.22, which he recently advertised
> on lkml [5], mentions a security fix.

No, it mentions a fix to the security subsystem (in this case,
SELinux-hooks for splice).

> his patches for 2.6.22.20 & 2.6.22.21 both cleanly apply to
> 2.6.22.19-vs2.2.0.7 (except for EXTRAVERSION in the Makefile, but that's
> cosmetic & expected).  i haven't rebooted my server yet to run either
> version, but i don't expect any problems when i do.
>
> [1] http://repo.or.cz/w/linux-2.6.22.y-op.git
> [2] http://repo.or.cz/w/linux-2.6.22.y-op-patches.git
> [3]
> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.20-op1
> [4]
> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.21-op1
> [5] http://lkml.org/lkml/2008/4/21/309
>
> corey
> --
> undefined@pobox.com
>


-- 
Daniel Hokka Zakrisson