Gentoo Archives: gentoo-user

From: Kevin O'Gorman <kogorman@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug
Date: Wed, 02 Dec 2009 14:34:17
Message-Id: 9acccfe50912020633s7df15f5awe0503b47df2ad7c2@mail.gmail.com
In Reply to: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug by Nikos Chantziaras
1 On Wed, Dec 2, 2009 at 5:45 AM, Nikos Chantziaras <realnc@×××××.de> wrote:
2
3 > On 12/02/2009 12:51 PM, Alan McKinnon wrote:
4 >
5 >> On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote:
6 >>
7 >>> Everyone should read the following and follow the advice given:
8 >>>
9 >>>
10 >>> http://blog.flameeyes.eu/2009/12/01/gentoo-service-announcement-keep-clear-
11 >>> of-gnu-patch-2-6
12 >>>
13 >>>
14 >> <sigh>
15 >>
16 >> I emerged patch-2.60 when it hit ~amd64 then downgraded it 10 days later
17 >> when
18 >> a report on b.g.o. showed it was affecting OOo.
19 >>
20 >> Right in the middle of those 10 days, I ran this:
21 >>
22 >> emerge -e world
23 >>
24 >> </sigh>
25 >>
26 >
27 > Yep, this bug was a major annoyance for me too. I emerged patch-2.6 on
28 > November 15 and since then, being on ~amd64, a *lot* of other packages.
29 > After downgrading, I needed to rebuild about 300 packages, including all of
30 > KDE4, Qt, Firefox and OpenOffice.
31 >
32 > Quite amazing how much damage a bug in a small package like this can have
33 > on a source-based distro...
34 >
35
36 For which reason I'm quite happy to be running stable except for specific
37 package releases that I put in package.unmask. Patch-2.6 has been ~x86 all
38 along, so I've been running 2.5.9 continuously since March of 2008.
39
40 --
41 Kevin O'Gorman, PhD