[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#592707: kernel should be protected against old package kvm-source



Source: linux-2.6
Severity: minor

There was a package in Lenny, kvm-source, which contains
kernel module for kvm subsystem and is built from package
named kvm.

All modern kernels includes kvm modules.  Kvm package is
now transitional to qemu-kvm, which does not provide any
kernel modules or packages like kvm-source.

kvm-source package has been removed from squeeze.

When kvm-source package is installed, it replaces kvm
modules in current kernel with old, obsolete ones, so
that current kvm userspace does not work anymore.
But current kernel includes more recent kvm modules
which works correctly even with old userspace.

So kvm-source breaks current kernels.  It breaks even
lenny's kernel (2.6.26), which includes more recent
kvm modules than in kvm-source_72 (from lenny), and
even more - 2.6.26 received a few security fixes for
kvm modules which are not present in kvm-source.

The only solution to this I see is to include Conflicts:
into kernel against kvm-source (unversioned).

Note that it is not sufficient to add such conflicts:
to qemu-kvm (userspace component), because one may
have installed kvm-source without qemu-kvm, kvm-source
broke the kernel module (replacing it with older and
buggy one), and later qemu-kvm is installed on already
broken system.

Thanks!

/mjt



Reply to: