[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Sparc 2.4 Sarge kernel metapackages have not been updated by DSA 1018-1

Hash: SHA1

For those running a Sparc with 2.4 kernel, it doesn't look like the
metapackages "kernel-image-2.4-sparc{32,64}{,-smp}" have been updated
correctly for Sarge -- they still depend upon the old 2.4.27-2 packages.
As I've just found out, you'll need to update manually to one of the
real kernel-image-2.4.27-3-sparc{32,64}{,-smp} packages even if you have
the metapackage installed.  It's safe but at the moment useless to leave
the metapackage installed, and to keep it installed you have to not
uninstall the old (insecure) 2.4.27-2 kernel.

It appears that this bug doesn't affect the 2.6 kernel security updates
for Sparc.  If you have the 2.6 kernel metapackage installed, your
upgrade should be semi-automatic.

Lest this be taken as whining, I want to give huge plaudits to the
kernel team; it looks like preparing this latest kernel update must have
been an enormous challenge.

Moritz Muehlenhoff wrote:

>   Sun Sparc architecture:
>     http://security.debian.org/pool/updates/main/k/kernel-latest-2.4-sparc/kernel-image-2.4-sparc32_42sarge1_sparc.deb

^^^ Version 42sarge1, the most recent one available for this package,
depends upon the 2.4.27-2 package instead of the new 2.4.27-3 package.
(And ditto for the other three Sparc 2.4 kernel metapackages.)


- --
Kevin B. McCarty <kmccarty@princeton.edu>   Physics Department
WWW: http://www.princeton.edu/~kmccarty/    Princeton University
GPG: public key ID 4F83C751                 Princeton, NJ 08544
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org


Reply to: