Joey Hess wrote: > Before we can release d-i rc3 we need all the kernels updated with at > least some security fixes, notably the ones that change the kernel > module ABI, and we need to update things to reflect the new kernel > "abiname". Here's my understanding of the current status of that:
Update for current status, 10 days after my first mail:
alpha
Kernel updated, but not yet in testing (old binaries); udebs updated;
rootskel/base-installer/debian-cd not yet updated.
amd64
Updated, but I'm not tracking this arch.
arm
No abiname; not updated. ?
[At the moment this is one of the arches that I'd consider
releasing d-i rc3 without it being updated for the kernel
security fixes, since it has no abiname, and since the daily
builds have been down since October.]
hppa
2.4 lacks abiname, has not been updated, and we're in the process of
dropping it.
2.6 has abiname; not updated.
[This is likely to block d-i rc3 until the new hppa 2.6 kernels
with the new abiname are available.]
i386
2.4 and 2.6 updated to -2 abiname; 2.4 debs in testing, 2.6
not; udebs updated; rootskel/base-installer/debian-cd not yet
updated.
ia64
2.4 and 2.6 updated to -2 abiname; debs in testing; udebs
updated; rootskel/base-installer/debian-cd not yet updated.
No initrd builds for last 10 days, at least 2.4 udebs untested.
m68k
No abiname; not updated. ?
[This is another arch that I'd consider releasing d-i rc3 without
it being updated for the kernel security fixes.]
mips
No abiname. Kernel updated and in testing; udebs updated.
No initrd daily builds since Dec 31 so new udebs untested.
mipsel
No abiname. Kernel updated and in testing; udebs updated.
powerpc
No abiname. 2.4 not updated. 2.6 updated, debs in testing;
udebs updated.
[If powerpc 2.4 is not updated with the security fixes soon, I
will probably not let it block a d-i rc3 release.]
s390
Has abiname; not updated
[This is likely to block d-i rc3 until the new kernels with the new
abiname are available.]
sparc
2.6 updated to -2 abiname; 2.4 not yet updated (except in svn);
2.6 debs not yet in testing (due to RC #288180); udebs updated;
rootskel/base-installer/debian-cd not yet updated.
So s390 and hppa are the main potential rc3 blockers, while alpha and
sparc just need to get kernels into testing and arm, m68k, and powerpc
(2.4) need to get a move on if you want them updated for the rc3
release. We're fast approaching the point where the kernel updates are
the only significant thing blocking the rc3 release.
Note that besides the abiname changes, there are pending uploads for
both 2.4 and 2.6, for all arches, to fix numerous other security holes.
I'm not considering those above, since it should be much easier to roll
a fix for a "normal" kernel security hole into d-i than the it is for
these security fixes that involve ABI changes.
--
see shy jo
signature.asc
Description: Digital signature
