diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2019-02-13 00:22:29 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2019-02-13 08:59:45 +0100 |
commit | 73d387f5699866c6d340e729855cccab9c82c602 (patch) | |
tree | df5a20013c88ffa12ccb0015de2aaf4a13cad89a /source/k/kernel-configs | |
parent | f5a2fd8812fe66114bc7581c08a922acca70b0fa (diff) | |
download | current-73d387f5699866c6d340e729855cccab9c82c602.tar.gz current-73d387f5699866c6d340e729855cccab9c82c602.tar.xz |
Wed Feb 13 00:22:29 UTC 201920190213002229
a/kernel-firmware-20190212_28f5f7d-noarch-1.txz: Upgraded.
a/kernel-generic-4.19.21-x86_64-1.txz: Upgraded.
a/kernel-huge-4.19.21-x86_64-1.txz: Upgraded.
a/kernel-modules-4.19.21-x86_64-1.txz: Upgraded.
ap/lxc-2.0.9_d3a03247-x86_64-1.txz: Upgraded.
This update fixes a security issue where a malicious privileged container
could overwrite the host binary and thus gain root-level code execution on
the host. As the LXC project considers privileged containers to be unsafe
no CVE has been assigned for this issue for LXC. To prevent this attack,
LXC has been patched to create a temporary copy of the calling binary
itself when it starts or attaches to containers. To do this LXC creates an
anonymous, in-memory file using the memfd_create() system call and copies
itself into the temporary in-memory file, which is then sealed to prevent
further modifications. LXC then executes this sealed, in-memory file
instead of the original on-disk binary.
For more information, see:
https://seclists.org/oss-sec/2019/q1/119
(* Security fix *)
d/kernel-headers-4.19.21-x86-1.txz: Upgraded.
k/kernel-source-4.19.21-noarch-1.txz: Upgraded.
l/libbluray-1.1.0-x86_64-1.txz: Upgraded.
l/libcap-2.26-x86_64-2.txz: Rebuilt.
Don't ship static library.
l/xapian-core-1.4.10-x86_64-1.txz: Upgraded.
n/gnupg2-2.2.13-x86_64-1.txz: Upgraded.
n/irssi-1.2.0-x86_64-1.txz: Upgraded.
n/libassuan-2.5.3-x86_64-1.txz: Upgraded.
x/bitmap-1.0.9-x86_64-1.txz: Upgraded.
x/libXau-1.0.9-x86_64-1.txz: Upgraded.
x/pixman-0.38.0-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'source/k/kernel-configs')
-rw-r--r-- | source/k/kernel-configs/config-generic-4.19.21 (renamed from source/k/kernel-configs/config-generic-4.19.20) | 2 | ||||
-rw-r--r-- | source/k/kernel-configs/config-generic-4.19.21.x64 (renamed from source/k/kernel-configs/config-generic-4.19.20.x64) | 2 | ||||
-rw-r--r-- | source/k/kernel-configs/config-generic-smp-4.19.21-smp (renamed from source/k/kernel-configs/config-generic-smp-4.19.20-smp) | 2 | ||||
-rw-r--r-- | source/k/kernel-configs/config-huge-4.19.21 (renamed from source/k/kernel-configs/config-huge-4.19.20) | 2 | ||||
-rw-r--r-- | source/k/kernel-configs/config-huge-4.19.21.x64 (renamed from source/k/kernel-configs/config-huge-4.19.20.x64) | 2 | ||||
-rw-r--r-- | source/k/kernel-configs/config-huge-smp-4.19.21-smp (renamed from source/k/kernel-configs/config-huge-smp-4.19.20-smp) | 2 |
6 files changed, 6 insertions, 6 deletions
diff --git a/source/k/kernel-configs/config-generic-4.19.20 b/source/k/kernel-configs/config-generic-4.19.21 index 582d7facd..562bebe8a 100644 --- a/source/k/kernel-configs/config-generic-4.19.20 +++ b/source/k/kernel-configs/config-generic-4.19.21 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # diff --git a/source/k/kernel-configs/config-generic-4.19.20.x64 b/source/k/kernel-configs/config-generic-4.19.21.x64 index e7453c8c5..6077818a5 100644 --- a/source/k/kernel-configs/config-generic-4.19.20.x64 +++ b/source/k/kernel-configs/config-generic-4.19.21.x64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # diff --git a/source/k/kernel-configs/config-generic-smp-4.19.20-smp b/source/k/kernel-configs/config-generic-smp-4.19.21-smp index 13a4e8f3d..7326e9c2e 100644 --- a/source/k/kernel-configs/config-generic-smp-4.19.20-smp +++ b/source/k/kernel-configs/config-generic-smp-4.19.21-smp @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # diff --git a/source/k/kernel-configs/config-huge-4.19.20 b/source/k/kernel-configs/config-huge-4.19.21 index c415be5b5..9f41e521e 100644 --- a/source/k/kernel-configs/config-huge-4.19.20 +++ b/source/k/kernel-configs/config-huge-4.19.21 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # diff --git a/source/k/kernel-configs/config-huge-4.19.20.x64 b/source/k/kernel-configs/config-huge-4.19.21.x64 index 11590f300..366bab757 100644 --- a/source/k/kernel-configs/config-huge-4.19.20.x64 +++ b/source/k/kernel-configs/config-huge-4.19.21.x64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # diff --git a/source/k/kernel-configs/config-huge-smp-4.19.20-smp b/source/k/kernel-configs/config-huge-smp-4.19.21-smp index 506d5182c..d18362f67 100644 --- a/source/k/kernel-configs/config-huge-smp-4.19.20-smp +++ b/source/k/kernel-configs/config-huge-smp-4.19.21-smp @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.19.20 Kernel Configuration +# Linux/x86 4.19.21 Kernel Configuration # # |