Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×
Linux Software

Kernel 2.4.26 Out 218

Posted by CmdrTaco from the living-in-the-safety-zone dept.
StupidKatz writes "Fresh from the oven, the fine folks at kernel.org have released 2.4.26, filled with such yummy goodness as fixes for those damnable mmap() vulns, among other things. Remember to use your favorite mirror!"
This discussion has been archived. No new comments can be posted.

Kernel 2.4.26 Out More

Kernel 2.4.26 Out

Comments Filter:
  • Linux trying to match up Microsoft's security releases? +P

  • Yum! (Score:2, Funny)

    by mr_clem ( 155428 )
    mmmhmmm, i cant wait to get my lil hanies on this one... too bad im on a lousy 56k while my ISP restructures... arrgh

  • When (Score:5, Insightful)

    by odano ( 735445 ) on Wednesday April 14, 2004 @07:52PM (#8864923)
    When are they going to start using bittorrent to start distributing these things?

    • Re:When (Score:1, Insightful)

      by rokzy ( 687636 )
      hopefully never
      • whats wrong with .torrent? it worked for miami
      • I mean what the hell is this bittorrent sucks meme anyway? Have you ever used it?

    • Re:When (Score:5, Insightful)

      by Anonymous Coward on Wednesday April 14, 2004 @08:09PM (#8865082)
      When are you going to get a clue and simply download the diff between this version and the last version?

      • Re:When (Score:5, Interesting)

        by Paladin128 ( 203968 ) <aaron&traas,org> on Wednesday April 14, 2004 @08:23PM (#8865192) Homepage
        What would be REALLY interesting is if the kernel source had a script triggered by something like "make update" that downloaded and installed the diff.
        • Well, it's already got a script that does the updating, at least in 2.6.

        • Re:When (Score:3, Interesting)

          by Zutroi_Zatatakowsky ( 513851 )
          Already done, in Gentoo.

          "emerge -u gentoo-sources" will fetch the current stable release and install it. The only thing left to do it the usual "make dep && make clean bzImage modules modules_install". Now, replace "gentoo-sources" with the sources set you prefer (mm, grsec, development (2.6), gaming, vanilla, etc.)

          But sure, if it was implemented at kernel level, it would be easier for non-gentoo users to update to next stable release. Could be made as a modules I guess. Love/Cox/Tosatti, I hope

          • Re:When (Score:2, Interesting)

            by grahamdrew ( 589499 )

            ...except that gentoo doesn't use a diff at all from version to version (at least not kernel version, patch level is something diffrent). Every kernel source build in the portage tree downloads a FULL source tarball (linux-2.4.26.tar.bz2) and then patches that. 2.4.27 comes out tomarrow? You're downloading another 30M tarball (or whatever they're running nowadays).

            I don't mean to rag on portage, it's a great system. It certaintly doesn't use diffs as the grandparent mentioned, though.

        • Re:When (Score:2, Interesting)

          by diegocgteleline.es ( 653730 )
          Already saw ketchup?

          http://www.selenic.com/ketchup/ketchup-0.5 [selenic.com] :

          ketchup is a script that automatically patches between kernel
          versions, downloading and caching patches as needed, and automatically
          determining the latest versions of several trees. Example usage:
          $ ketchup 2.6-mm
          2.6.3-rc1-mm1 -> 2.6.5-mm4
          Applying 2.6.3-rc1-mm1.bz2 -R
          Applying patch-2.6.3-rc1.bz2 -R
          Applying patch-2.6.3.bz2
          Applying patch-2.6.4.bz2
          Applying patch-2.6.5.bz2
          Downloading 2.6.5-mm4.bz2
          Downloading 2.6.5-mm4.bz
        • cd /usr/src && make update

      • Re:When (Score:2, Insightful)

        by Anonymous Coward
        I don't know about the rest of you, but it's quicker for me to download the whole file (takes a few seconds) than to work out how to properly apply the patch.
        • cd /kernel/source/directory/
          patch -p1 </path/to/patch

          Decompress the patch before.

          It might be fast, but someone's paying the bandwidth for the mirror.

    • Re:When (Score:2, Funny)

      by reub2000 ( 705806 ) *
      When it's bigger than 500MB

    • Re:When (Score:4, Funny)

      by mj2k ( 726937 ) on Wednesday April 14, 2004 @08:27PM (#8865232)
      just when I thought I'd be able to dl the kernel, the release is announced on /.
    • When the kernel.org [kernel.org] bandwidth meter maxes out.

  • Perfect Timing (Score:5, Funny)

    by Foggy1 ( 692248 ) on Wednesday April 14, 2004 @07:52PM (#8864927)
    Two days after I upgrade to 2.6.5. Wonderful.
    • 2.4.26 vs. 2.6.5 I think you will be happy with the scheduler improvements alone.
    • They didn't cover the release of 2.6.5...or 2.6.4 for that matter. Why cover a 2.4 variant?

      Just wondering.
      • many of us are still stuck on 2.4 thanks to driver issues etc. That's why it's news. My laptop runs 2.6 like a pro, but the intel 536EP winmodem drivers won't let me run it on my main system

      • It's so obvious it should be Gary Oldman.. (Score:5, Funny)

        by adamofgreyskull ( 640712 ) on Wednesday April 14, 2004 @08:27PM (#8865234)
        CmdrTaco: You want news?
        ScottGant: I think I'm entitled to it.
        CmdrTaco: You want news?
        ScottGant: I want stuff that matters!
        CmdrTaco: You can't handle stuff that matters!
        Son, we live in a world that has firewalls. And those firewalls have to be guarded by admins with stable kernels. Who's gonna do it? You? You, ScottGant? I have a greater responsibility than you can possibly fathom. You weep for Stanford [slashdot.org] and you curse the /. editors. You have that luxury. You have the luxury of not knowing what I know: that this 2.4 kernel release, while tragically dull, probably saved lives. And my existence, while grotesque and incomprehensible to you, saves lives...You don't want the stuff that matters.
        We use words like integrity, dupes,stability...we use these words as the backbone to a life spent defending something. You use 'em as a punchline. I have neither the time nor the inclination to explain myself to a man who rises and sleeps under the blanket of the very security I provide, then questions the manner in which I provide it! I'd rather you just said thank you and went on your way. Otherwise, I suggest you pick up a cheap hosting company and run a website. Either way, I don't give a damn what you think you're entitled to!

        I really need some sleep.

        • Very good... possible improvement? (Score:2, Informative)

          by Anonymous Coward
          I changed it up a bit ... the essence is the same though.

          A Few Good Admins

          "Admin: You want news?"

          "User: I think I'm entitled to it."

          "Admin: You want news?"

          "User: I want news for nerds. I want stuff that matters!"

          "Admin: Son, we live in a world that has firewalls. And those firewalls have to be guarded by admins with stable kernels. Who's gonna do it? You? You, Mr. "MCSE"? I have a greater responsibility than you can possibly fathom. You weep for Microsoft and you curse Open Source. You have that l
        • I know I've heard that somewhere, but I can't quite rememer where. Anyone care to enlighten me?

          • I know I've heard that somewhere, but I can't quite rememer where.

            It's a parody of a well-known courtroom scene from "A Few Good Men" -- the first few lines were used extensively in the ads for the movie, and if you actually saw the movie or play the longer part of the dialog would probably ring a bell as well.

            IMDB (and probably a few million other sites) has the original version in their memorable quotes [imdb.com] section for the movie version. Look for "Col Jessep" -- that's the character being parodied

        • CmdrTaco [yelling]: Did you order a subscription?
      • They did:
        2.6.5 [slashdot.org]
        2.6.4 [slashdot.org]
        Since slashdot is a major place to discuss and learn about linux, I think it's newsworthy because the kernel is the heart of linux. This is always the first place I hear about new kernels, plus the discussions usually tell what is new in it so I dont have to sift through the changelogs.

  • The kernels out??? (Score:5, Funny)

    by Anonymous Coward on Wednesday April 14, 2004 @07:54PM (#8864946)
    Never in a million years would I have guessed it was gay.
    • Actually, I was thinking about this today. I work as an admin at a high school, and there's always a few students hovering about the tech crew. I get the vibe that a disproportionately high number of the geeks here are homosexual. Is this something I should know by now or just a fluke?

      Does the social stigma of being gay drive otherwise normal people to geekdom? Does geekiness drive the people to alternate sexualities? Or do the two go hand-in-hand?
  • i've almost finished downloading all the new mandrake cd's and they're already out of date
  • I hear he is just about ready to get the iso out...

    back to the drawing board I guess ;)

  • Well well, (Score:5, Insightful)

    by On Lawn ( 1073 ) on Wednesday April 14, 2004 @07:58PM (#8864992) Journal

    I've just got to say, I think Marcello's done a great job on the 2.4 series. For having to be part political leader, part CS genious, and part referee he's not given many people a reason to complain.

  • And then... (Score:5, Funny)

    by tcgwebs ( 737923 ) on Wednesday April 14, 2004 @07:59PM (#8865003) Homepage
    And then the new kernel fixes old bugs, and implements new features, which will have bugs, which the next patch will fix, which will implement new features, which will have bugs, which the next patch will fix, which will implement new features, which will have bugs, which the next patch will fix, which will implement new features, which will have bugs, which the next patch will fix, which will implement new features, which will have bugs, which the next patch will fix, which will implement new features, which will still have bugs.

    Damn. Maybe I should switch to Windows. Oh.. wait..

  • Fixed references (& relevant debian-security u (Score:3, Informative)

    by crimsun ( 4771 ) * <crimsun AT ubuntu DOT com> on Wednesday April 14, 2004 @08:01PM (#8865018) Homepage
    Philippe Troin is one of many who crossed-checked the CAN list. Here [debian.org] are the relevant fixes in 2.4.26.
  • I've been putting off the seemingly arduous task of moving to 2.6.x...maybe I should just scratch my itch by upgrading to a newer 2.4.x kernel..

    • Re:Hmmm... (Score:2, Interesting)

      by mh101 ( 620659 )
      I don't think it's an arduous task... I thought it was going to be a big task too, until I asked on the Gentoo forums. I was told that I just need to do the usual "compile sources, update bootloader" procedure.

      Or maybe that only works with Gentoo...?
    • Allow me to refer you to your sig.
    • I've done it on several of my Debian machines, and it's hardly been arduous. Out of all my personal boxes, only one remains running 2.4.x - and that's because of (a) a buggy USB device driver in 2.6.x, and (b) the em8300 driver that I use. Other than building the kernel, as long as your system is reasonably up to date, all you need to install is the 'module-init-tools' stuff that 2.6.x needs for module loading, and you're ready to go.

    • Re:Hmmm... (Score:2, Informative)

      by Quattro Vezina ( 714892 )
      It's not hard at all. Well, no harder than upgrading to a newer 2.4. I just upgraded to 2.6.x other day, and it was easy. Just check to make sure everything you need is enabled in the config, and that's all you have to worry about.

      I suppose it depends on your distro tho...I'm a Gentoo user, so I don't know how it's different on another distro.

      FYI, on Gentoo it went something like:

      $ su
      # emerge -v gentoo-dev-sources
      # cd /usr/src
      # rm -f linux
      # ln -s linux-2.6.5-gentoo linux
      # genkernel all --xconfig
      (insert c

  • Not mremap(), but these! (Score:5, Informative)

    by fifirebel ( 137361 ) on Wednesday April 14, 2004 @08:09PM (#8865077)
    <KARMA TYPE="whoring">

    Okay... This is the result of a cursory check, do your homework folks!

    • CAN-2004-0003

      The R128 DRI bounds checking bug is a potential local root exploit.
      According to this patch [iu.edu] 2.4.26 contains the fix.

    • CAN-2004-0109

      The isofs bug. It is locally exploitable iff you have hardware access or if you can induce someone to mount a compromised medium.

    • CAN-2004-0177

      The ext3 information leak. It cannot lead to any exploit and has only the tiniest chances of giving an attacker any usable information.

    • CAN-2004-0178

      The SoundBlaster Denial of Service.

    But no, no mremap issues...

    </KARMA>

    • Ahem. (Score:3, Informative)

      by StupidKatz ( 467476 )
      'NFS: Make sure that fsync() flushes all pending file data to disk. The current call to nfs_wb_file() will fail to flush out mmapped() dirty pages.'

      • Re:Ahem. (Score:2, Interesting)

        by lagoon ( 124029 )
        I am not a C guru, but that is not a vulnerability as far as I know. Just a regular bug which might be nasty in some circumstances when one uses async NFS. I for one hope that those mmap() vulnerabilities have been fixed properly in the last few releases.
    • # CAN-2004-0178
      The SoundBlaster Denial of Service.

      That's right.. we're fighting back against DRM - one bug report at a time!

  • 2.6.5 is latest stable but.. (Score:5, Funny)

    by destiney ( 149922 ) on Wednesday April 14, 2004 @08:11PM (#8865099) Homepage

    Debian users need new news too I guess.

    • Excuse me?

      kernel-image-2.6-386 - Linux kernel image for version 2.6 on 386.
      kernel-image-2.6-686 - Linux kernel image for version 2.6 on PPro/Celeron/PII/PIII/PIV.
      kernel-image-2.6-686-smp - Linux kernel image for version 2.6 on PPro/Celeron/PII/PIII/PIV SMP.
      kernel-image-2.6-k7 - Linux kernel image for version 2.6 on AMD K7.
      kernel-image-2.6-k7-smp - Linux kernel image for version 2.6 on AMD K7 SMP.
      kernel-image-2.6.3-1-386 - Linux kernel image for version 2.6.3 on 386.
      kernel-image-2.6.3-1-686 - Linux

    • *Ahem*

      saavik:~# cat /etc/debian_version
      testing/unstable
      saavik:~# uname -a
      Linux saavik 2.6.5 #3 Sun Apr 11 14:17:30 EST 2004 i686 GNU/Linux
      taliesin:~# cat /etc/debian_version
      testing/unstable
      taliesin:~# uname -a
      Linux taliesin 2.6.5 #2 Sun Apr 11 22:54:33 EST 2004 i686 GNU/Linux
    • See this bug [kernel.org]. I have the same PDC20265 hardware and had constant crashes until I read this bug and downgraded to 2.4.
    • "Debian users need new news too I guess."

      So, what is 2.2 up to by now?

  • Damn! Debian screwed up (Score:4, Informative)

    by Malc ( 1751 ) on Wednesday April 14, 2004 @09:08PM (#8865517)
    What a day! The kernel upgrade released with DSA 479-1 was broken. Ext3 filesystems unmounable as it would appear the kernel module was missing from the initrd file (my guess, but seems logical). Quarter of an hour after I figured out that kernel-image-2.4.18-1-686_2.4.18-13_i386.deb was 1.1MB and obviously wrong I got another email from Martin Schulze announcing DSA 479-2. A quick check indicates it's a more reasonable size at 8.3MB.

    Some egg on Debian's face today :( Their updates go so smoothly normally that it's easy to become complacent and not do things with enough process.

    Lessons:
    1) Patch a test system first if you have access to one
    2) Make sure your boot loader will boot from the old kernel after upgrading
    3) Have a boot disk handy
    4) Debate whether you can wait a few days before patching or whether the security liability is too high.

  • Over in Utah... (Score:4, Funny)

    by Chris Brewer ( 66818 ) on Wednesday April 14, 2004 @09:21PM (#8865611) Journal
    "Just look at this:

    - JFS: Add lots of missing statics and remove dead code
    - JFS: Prevent hang in __lock_metapage
    - JFS: Fix race in jfs_sync

    Not only are those pesky hippie theives stole our precious JFS, they're also fixing bugs in it. Curse them!"

  • LVM2? (Score:2, Interesting)

    by bulletman ( 254401 )
    Anyone know whether LVM2 got into this kernel?

    Stephen

  • Summary Changelog (Score:5, Informative)

    by rimu guy ( 665008 ) on Thursday April 15, 2004 @12:16AM (#8866144) Homepage

    For those who don't like 1000 line changelogs, here are the changes that Marcello specifically mentioned on his -pre and -rc lkml postings:

    • NFS client fixes
    • Bluetooth fixes
    • IDE update (fixes for AMD chipset driver)
    • Inclusion of Medley software RAID driver by Thomas Horsten http://www.infowares.com/linux/#medley_intro [infowares.com]
    • XFS update
    • Big SCTP (http://www.sctp.org [sctp.org]) merge (to match 2.6 API)
    • Network driver updates (including the addition of nVidia Force driver).
    • ACPI upstream merge

    - Run Your own Linux Server on The Latest and Greatest 2.4 or 2.6 Kernel [rimuhosting.com]

  • What's the closest place for me to get my install?

Slashdot Top Deals

"If it ain't broke, don't fix it." - Bert Lantz

Close