[Fwd: Re: [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities]

[Daniel Kahn Gillmor <dkg@fifthhorseman.net>]

sorry, this proposed boilerplate change was meant to go to the list, not
just to dann.

Thanks for all your work, folks.

	--dkg

--- Begin Message ---

• To: dann frazier <dannf@dannf.org>
• Subject: Re: [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities
• From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
• Date: Wed, 10 Mar 2010 17:20:11 -0500
• Message-id: <4B981B1B.1040901@fifthhorseman.net>
• In-reply-to: <[🔎] 20100310215312.GD1417@lackof.org>
• References: <20100310181854.GU24917@ldl.fc.hp.com> <[🔎] 4B97F08E.3010708@fifthhorseman.net> <[🔎] 20100310194923.GB1417@lackof.org> <[🔎] 4B980A9C.8070206@fifthhorseman.net> <[🔎] 20100310215312.GD1417@lackof.org>

On 03/10/2010 04:53 PM, dann frazier wrote:
> On Wed, Mar 10, 2010 at 04:09:48PM -0500, Daniel Kahn Gillmor wrote:
>> So would the 4th be fixed if i went ahead
>> and rebuilt from the kvm_source package referenced by DSA-2010-1?
> 
> Yes.

Thank you for your prompt explanations, and for your patience, dann.  I
think i understand the situation now.

Here is proposed boilerplate for future notices like this about kvm:

Where it used to say:

 We recommend that you upgrade your kvm package.

It could say:

 We recommend that you upgrade your kvm package.  If your system is
 currently using a kvm-modules package built from previous versions of
 the kvm-source package, we recommend that you upgrade your kvm-source
 package, re-build a new kvm-modules package and install it.  You should
 subsequently unload the old kvm modules from your kernel and reload the
 newly built kernel modules.  The simplest way to accomplish this kernel
 module unload/reload is a system restart.

Feel free to edit it as you see fit, of course.

Regards,

	--dkg

Attachment: signature.asc
Description: OpenPGP digital signature

--- End Message ---

Attachment: signature.asc
Description: OpenPGP digital signature