[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: New boot-floppies for 3.0r1?

Moin Adam!
Adam Di Carlo schrieb am Mittwoch, den 11. September 2002:

> > I'm in favor of doing a new boot-floppies release, hopefully we can
> > get it tested for 3.0.r1, seconds?

I am not sure how to test it extensively without moving it to testing. But
OTOH testing currently has packages which are not installable with Woody's
debootstrap so it would require a separated build.

> I second.  I beg you to remember that we are actually looking to get
> both 3.0.23 and 3.0.24 into woody.  Stable has 3.0.22.

Yes and no. Stable has 3.0.23 binary build, but the source of 3.0.22 since
3.0.23 was excluded because of RC bugs.

> > Remaining issues (maybe, please comment, please add your own) :
> > 
> >  - update modconf
> >    (http://lists.debian.org/debian-boot/2002/debian-boot-200208/msg00475.html)
> >    I'll do an upload in the near future.

Please do so.

> >  - #152152: boot-floppies: bf2.4 kernel may need an (security) update
> >    It looks like the solution to this may be to update to 2.4.19 from
> >    2.4.18 (see #146349 : kernel-image-2.4.18-*: Linux Netfilter
> >    NAT/ICMP code information leak).  What do you think Eduard?

I passed the kernel package to jaqque, ask him. IMHO the issue may not be very
important. AFAIK no exploit is known since the issue has been reported.

> I think we're waiting for the problem to be fixed by the kernel
> maintainer.  We should use a patched 2.4.18 since it seems unlikely to
> me that the archive maintainers will allow a new kernel (2.4.19) into
> stable point releases.

2.4.19 also requires an update of modutils and I have heart bad things about
some changes in 2.4.19rc series making it unstable or completely unuseable for
some people, even if it supports newer hardware.


Reply to: