Re: New boot-floppies for 3.0r1?
Adam Di Carlo schrieb am Mittwoch, den 11. September 2002:
> > I'm in favor of doing a new boot-floppies release, hopefully we can
> > get it tested for 3.0.r1, seconds?
I am not sure how to test it extensively without moving it to testing. But
OTOH testing currently has packages which are not installable with Woody's
debootstrap so it would require a separated build.
> I second. I beg you to remember that we are actually looking to get
> both 3.0.23 and 3.0.24 into woody. Stable has 3.0.22.
Yes and no. Stable has 3.0.23 binary build, but the source of 3.0.22 since
3.0.23 was excluded because of RC bugs.
> > Remaining issues (maybe, please comment, please add your own) :
> > - update modconf
> > (http://lists.debian.org/debian-boot/2002/debian-boot-200208/msg00475.html)
> > I'll do an upload in the near future.
Please do so.
> > - #152152: boot-floppies: bf2.4 kernel may need an (security) update
> > It looks like the solution to this may be to update to 2.4.19 from
> > 2.4.18 (see #146349 : kernel-image-2.4.18-*: Linux Netfilter
> > NAT/ICMP code information leak). What do you think Eduard?
I passed the kernel package to jaqque, ask him. IMHO the issue may not be very
important. AFAIK no exploit is known since the issue has been reported.
> I think we're waiting for the problem to be fixed by the kernel
> maintainer. We should use a patched 2.4.18 since it seems unlikely to
> me that the archive maintainers will allow a new kernel (2.4.19) into
> stable point releases.
2.4.19 also requires an update of modutils and I have heart bad things about
some changes in 2.4.19rc series making it unstable or completely unuseable for
some people, even if it supports newer hardware.