Sparc 2.4 Sarge kernel metapackages have not been updated by DSA 1018-1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
For those running a Sparc with 2.4 kernel, it doesn't look like the
metapackages "kernel-image-2.4-sparc{32,64}{,-smp}" have been updated
correctly for Sarge -- they still depend upon the old 2.4.27-2 packages.
As I've just found out, you'll need to update manually to one of the
real kernel-image-2.4.27-3-sparc{32,64}{,-smp} packages even if you have
the metapackage installed. It's safe but at the moment useless to leave
the metapackage installed, and to keep it installed you have to not
uninstall the old (insecure) 2.4.27-2 kernel.
It appears that this bug doesn't affect the 2.6 kernel security updates
for Sparc. If you have the 2.6 kernel metapackage installed, your
upgrade should be semi-automatic.
Lest this be taken as whining, I want to give huge plaudits to the
kernel team; it looks like preparing this latest kernel update must have
been an enormous challenge.
Moritz Muehlenhoff wrote:
> Sun Sparc architecture:
>
> http://security.debian.org/pool/updates/main/k/kernel-latest-2.4-sparc/kernel-image-2.4-sparc32_42sarge1_sparc.deb
^^^ Version 42sarge1, the most recent one available for this package,
depends upon the 2.4.27-2 package instead of the new 2.4.27-3 package.
(And ditto for the other three Sparc 2.4 kernel metapackages.)
regards,
- --
Kevin B. McCarty <kmccarty@princeton.edu> Physics Department
WWW: http://www.princeton.edu/~kmccarty/ Princeton University
GPG: public key ID 4F83C751 Princeton, NJ 08544
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFEJAl7fYxAIk+Dx1ERAleXAKDRa9m/6CBcq2rD4yRXXeyPFnb70gCghkQD
PJkZU9ofKYw1fI2TuXFs0yc=
=wxsJ
-----END PGP SIGNATURE-----
Reply to: