Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] hardened-sources wrt CVE-2014-3153 and CVE-2014-0196
Date: Sat, 07 Jun 2014 21:52:10
Message-Id: d121dd5d73b4010e9ba98940ac2a5852.squirrel@atoth.sote.hu
In Reply to: [gentoo-hardened] hardened-sources wrt CVE-2014-3153 and CVE-2014-0196 by "Anthony G. Basile"
1 2014.Június 7.(Szo) 15:07 időpontban Anthony G. Basile ezt írta:
2 > This is one of those rare situations where there are enough serious bugs
3 > against the kernel that we may have to rapid stabilize
4 > hardened-sources-3.2.59-r5 and 3.14.5-r2. These are currently marked ~
5 > because I need feedback from users. So please try to upgrade to either
6 > one (3.2 is preferred for mission critical) and give me feedback. The
7 > only caution is do not enable KSTACKOVERFLOW, a new option which is know
8 > to cause panics, eg virtio iface.
9
10 I'm running hardened-sources-3.14.5 since Tuesday, and rebooted into
11 hardened-sources-3.14.5-r2 on Saturday. I kept KSTACKOVERFLOW enabled for
12 both kernels and experienced no crashes so far on two systems.
13
14 Dw.
15 --
16 dr Tóth Attila, Radiológus, 06-20-825-8057
17 Attila Toth MD, Radiologist, +36-20-825-8057

Replies

Subject Author
Re: [gentoo-hardened] hardened-sources wrt CVE-2014-3153 and CVE-2014-0196 "Anthony G. Basile" <basile@××××××××××××××.edu>