Re: [Evergreen] evergreen 11.4 openssh update

2016-01-15 Thread Michal Kubecek
On Fri, Jan 15, 2016 at 07:22:25PM +0100, Christian wrote: > Hi, > I would try to prepare an update for openssh > Or is someone already doing it ... > > http://www.heise.de/newsticker/meldung/Triple-Seven-OpenSSH-Schwachstelle-leakt-geheime-Schluessel-3071372.html > > Experimental roaming code in

Re: [Evergreen] evergreen 11.4 openssh update

2016-01-21 Thread Michal Kubecek
On Wed, Jan 20, 2016 at 06:24:56PM +0100, Christian wrote: > Am 18.01.2016 um 12:54 schrieb Adrian Schröter: > > On Monday 18 January 2016, 12:06:16 wrote Wolfgang Rosenauer: > >> > >> https://build.opensuse.org/package/show/openSUSE:Evergreen:11.4/openssh.363 > > > > problem should be fixed now.

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-01-30 Thread Michal Kubecek
On Sat, Jan 30, 2016 at 11:34:09AM +0100, Ronny Peine wrote: > > I would like to ask if and when the new kernel will arrive in the > standard update repos or if an additional repository is needed for > supported kernels. The plan is to switch in the beginning of February. Unless there are some pr

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-01-30 Thread Michal Kubecek
On Sat, Jan 30, 2016 at 06:18:37PM +0100, Marcus Meissner wrote: > > Also a side note, we are testing a 13.1 kernel update for the current > local root exploit and will want to release that before. OK, I'll wait until this one is released. For some reason I thought it already was out.

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-02-02 Thread Michal Kubecek
On Tue, Feb 02, 2016 at 04:20:09PM +0100, Marcus Meissner wrote: > On Sat, Jan 30, 2016 at 08:33:39PM +0100, Michal Kubecek wrote: > > On Sat, Jan 30, 2016 at 06:18:37PM +0100, Marcus Meissner wrote: > > > > > > Also a side note, we are testing a 13.1 kernel update

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-02-02 Thread Michal Kubecek
On Tue, Feb 02, 2016 at 05:37:36PM -0500, Felix Miata wrote: > Michal Kubecek composed on 2016-02-02 22:25 (UTC+0100): > > >> > Marcus Meissner wrote: > > >> > > Also a side note, we are testing a 13.1 kernel update for the current > >> > > loca

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-02-03 Thread Michal Kubecek
On Wed, Feb 03, 2016 at 09:30:42AM +0100, Marcus Meissner wrote: > On Wed, Feb 03, 2016 at 08:28:43AM +0100, Michal Kubecek wrote: > > On Tue, Feb 02, 2016 at 10:25:10PM +0100, Michal Kubecek wrote: > > > On Tue, Feb 02, 2016 at 04:20:09PM +0100, Marcus Meissner wrote: >

Re: [Evergreen] Evergreen 13.1 kernel - conclusion

2016-02-03 Thread Michal Kubecek
On Tue, Feb 02, 2016 at 10:25:10PM +0100, Michal Kubecek wrote: > On Tue, Feb 02, 2016 at 04:20:09PM +0100, Marcus Meissner wrote: > > > we will probably need to refresh some of the kmps too if they no > > longer build. > > I have all 13.1 packages which build KMPs linke

Re: [Evergreen] Fwd: [security-announce] Todays openssl release - "DROWN" CVE-2016-0800 and "Cachebleed"

2016-03-01 Thread Michal Kubecek
> > I'm not sure what to do for 11.4. 11.4 is currently on 1.0.1p and > probably it's totally acceptable to update it to 1.0.1s? > > Anyone up for taking care? I'll take a look. Michal ___ Evergreen mailing list Evergreen@lists.rosenauer.org http://l

Re: [Evergreen] Fwd: [security-announce] Todays openssl release - "DROWN" CVE-2016-0800 and "Cachebleed"

2016-03-01 Thread Michal Kubecek
On Tue, Mar 01, 2016 at 07:05:24PM +0100, Wolfgang Rosenauer wrote: > > I'm not sure what to do for 11.4. 11.4 is currently on 1.0.1p and > probably it's totally acceptable to update it to 1.0.1s? > > Anyone up for taking care? I have packages ready in OBS; they passed openssl testsuite (as part

Re: [Evergreen] Fwd: [security-announce] Todays openssl release - "DROWN" CVE-2016-0800 and "Cachebleed"

2016-03-01 Thread Michal Kubecek
On Wed, Mar 02, 2016 at 07:29:02AM +0100, Patrick Schaaf wrote: > On Tue, Mar 1, 2016 at 11:49 PM, Michal Kubecek wrote: > > http://download.opensuse.org/repositories/home:/mkubecek:/branches:/Evergreen_Maintained:/openssl/openSUSE_Evergreen_11.4/ > > I'm going to test that

Re: [Evergreen] Fwd: [security-announce] Todays openssl release - "DROWN" CVE-2016-0800 and "Cachebleed"

2016-03-01 Thread Michal Kubecek
On Wed, Mar 02, 2016 at 08:06:31AM +0100, Patrick Schaaf wrote: > On Wed, Mar 2, 2016 at 7:58 AM, Michal Kubecek wrote: > > This is surprising as current evergreen 11.4 openssl update (version > > 1.0.1p-68.2) does present exactly the same version (0x1000110f) which > > was o

Re: [Evergreen] 13.1 kernel update to 3.12 (SLES 12 SP1 level) ready for test

2016-03-03 Thread Michal Kubecek
r which is still null is dereferenced). > > It is not easy to play with those servers, I've only a small free > timeframe ... It seems our controler are missing a firmware update > which will be make next tuesday night. Let'

Re: [Evergreen] 13.1 kernel update to 3.12 (SLES 12 SP1 level) ready for test

2016-03-08 Thread Michal Kubecek
ote: if anybody is going to report a bug for the 3.12 kernel, please add me to Cc (my bugzilla account is mkube...@suse.com). Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org

Re: [Evergreen] Every second: "reset full-speed USB device number 2 using uhci_hcd"

2016-03-16 Thread Michal Kubecek
On Tue, Mar 15, 2016 at 11:02:55PM +0100, Carlos E. R. wrote: > > I see this activity in the log since I updated my 32b server machine > (on 13.1): > > <0.6> 2016-03-15T22:16:00.928142+01:00 AmonLanc kernel - - - [39604.176042] > usb 4-2: reset full-speed USB device number 2 using uhci_hcd > <0.

Re: [Evergreen] openSUSE 13.1 with Kernel 3.12 loads wrong firmware for Intel 7260 wifi chip

2016-03-19 Thread Michal Kubecek
On Sat, Mar 19, 2016 at 09:18:55AM +0100, Xaver Gerster wrote: > > on my laptop, with Intel Corporation Wireless 7260 wifi chip on a > Haswell platform with openSuse 13.1 and kernel 3.12.53-40-desktop I > have recently experienced severe problems using wifi. > > More info can be found in my (sorr

Re: [Evergreen] haveged spins after kernel upgrade

2016-03-30 Thread Michal Kubecek
c VCS repository. The bug was probably fixed between versions 1.8 and 1.9.0 together with many other changes so that isolating the fix would be extremely difficult. Michal Kubecek ___ Evergre

Re: [Evergreen] haveged spins after kernel upgrade

2016-03-31 Thread Michal Kubecek
e, I would prefer leaving it unfixed unless we are positively sure there are 13.1 users who have strong need to use values bigger than 4066. Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org http://lists.rosenauer.org/mailman/listinfo/evergreen

Re: [Evergreen] BUG: errors with samba at 100% CPU after kernel update

2016-03-31 Thread Michal Kubecek
.com) or add me to Cc. Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org http://lists.rosenauer.org/mailman/listinfo/evergreen

Re: [Evergreen] BUG: errors with samba at 100% CPU after kernel update

2016-04-03 Thread Michal Kubecek
On Thu, Mar 31, 2016 at 09:07:10AM +0200, Georg Weickelt wrote: > > After updating the kernel to 3.12.53-40-default samba is no longer > running smoothly. The smbd process often stands at 100% CPU and can > not be removed by kill. From time to time am message like this > appears: > BUG: Soft locku

Re: [Evergreen] BUG: errors with samba at 100% CPU after kernel update

2016-04-07 Thread Michal Kubecek
vergreen-13.1/openSUSE_13.1/ (which is going to be the next update unless some critical issue is found) resolves the issue for you. Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org

Re: [Evergreen] Expanded Support for OpenSuSE 13.2

2016-04-10 Thread Michal Kubecek
On Sun, Apr 10, 2016 at 02:39:38PM +0200, reinhard hennig wrote: > will it be possible to provide an evergreen project for OpenSuSE > 13.2? Definitely possible but highly unlikely. Providing community support for two versions so close to each other would be wasting resources which are scarce as it

Re: [Evergreen] Expanded Support for OpenSuSE 13.2

2016-04-11 Thread Michal Kubecek
On Mon, Apr 11, 2016 at 10:40:57AM +0200, Axel Braun wrote: > > > On Sunday 10 April 2016, Per Jessen wrote: > > > >> I would also like to see 13.2 supported long-term, it's a very solid > > >> release. > > I feel the community is in a difficult position here: The commitment > is to support 13.1

Re: [Evergreen] Evergreen LTS

2016-04-11 Thread Michal Kubecek
ly situation. I believe 42.2 is going to have a 4.4 kernel based on SLE12-SP2. The real question IMHO is what we get in 42.3 but it's too early to even guess. That is what I see as the real proving point of the Leap concept.

Re: [Evergreen] Expanded Support for OpenSuSE 13.2

2016-04-11 Thread Michal Kubecek
On Mon, Apr 11, 2016 at 01:43:16PM +0200, Per Jessen wrote: > Not forgetting, if you want to install a 32bit 13.2 xen pvm guest, I > think it's only possible by installing 13.1 and then upgrading. Do you have a link providing some details? It might shed some light into bsc#970375 which I'm compl

Re: [Evergreen] Expanded Support for OpenSuSE 13.2

2016-04-11 Thread Michal Kubecek
On Mon, Apr 11, 2016 at 02:05:23PM +0200, Per Jessen wrote: > Michal Kubecek wrote: > >Do you have a link providing some details? It might shed some light into > >bsc#970375 which I'm completely clueless about so far. > > I opened this about a year ago: > &g

[Evergreen] samba security update - badlock and friends

2016-04-12 Thread Michal Kubecek
Hello, as you may have noticed, we have another Barnum bug with fancy name, fancy logo and 2nd level domain, this time called "Badlock". It also comes with few more security fixes. A preliminary update package for Evergreen 11.4 can be found at http://download.opensuse.org/repositories/home:/

Re: [Evergreen] samba security update - badlock and friends

2016-04-13 Thread Michal Kubecek
On Tue, Apr 12, 2016 at 11:48:50PM +0200, Michal Kubecek wrote: > > As for 13.1, we have version 4.1.22. Upstream has abandoned the 4.1 > series and does not provide fixes for it. Doing a backport myself would > be extremely time consuming and I wouldn't be able to trust th

Re: [Evergreen] samba security update - badlock and friends

2016-04-13 Thread Michal Kubecek
On Wed, Apr 13, 2016 at 01:22:46PM +0200, Michal Kubecek wrote: > > I'll submit both later today once I have chance to to at least some > testing (and write the patchinfo). Anyone willing to test it is welcome, > of course. I did some (very) basic testing and found only one iss

Re: [Evergreen] samba security update - badlock and friends

2016-04-13 Thread Michal Kubecek
On Thu, Apr 14, 2016 at 12:31:48AM +0200, Christian Boltz wrote: > Am Mittwoch, 13. April 2016, 22:04:37 CEST schrieb Michal Kubecek: > > > > I did some (very) basic testing and found only one issue: to start > > nmbd from 4.2.4 package on a 13.1 system with AppArmor, these

Re: [Evergreen] samba security update - badlock and friends

2016-04-13 Thread Michal Kubecek
On Thu, Apr 14, 2016 at 07:25:51AM +0200, Michal Kubecek wrote: > On Thu, Apr 14, 2016 at 12:31:48AM +0200, Christian Boltz wrote: > > Am Mittwoch, 13. April 2016, 22:04:37 CEST schrieb Michal Kubecek: > > > > > > I did some (very) basic testing and found only one issu

Re: [Evergreen] samba security update - badlock and friends

2016-04-15 Thread Michal Kubecek
On Thu, Apr 14, 2016 at 07:25:51AM +0200, Michal Kubecek wrote: > On Thu, Apr 14, 2016 at 12:31:48AM +0200, Christian Boltz wrote: > > > General feedback if we want that "big" profile update patch or only a > > "small" patch to adjust the samba/nmbd profil

Re: [Evergreen] samba security update - badlock and friends

2016-04-16 Thread Michal Kubecek
ut after more than half of first 10 commits needed adjusting and there were still more than 200 more, I realized that upgrade is probably the only viable option. After all, the fact that the same was done in SLE12 GA was a hint... Michal Ku

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-22 Thread Michal Kubecek
act that I submitted another update this week - even if I have no idea how or why and I'm pretty sure it's not supposed to work that way. Michal Kubecek ___ Evergreen mailing list Ever

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-22 Thread Michal Kubecek
f possible) or Secure Boot was disabled. That's why kernel updates are handled in openSUSE:Maintenance. Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org http://lists.rosenauer.org/mailman/listinfo/evergreen

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-22 Thread Michal Kubecek
could only be used if the key was added manually (if possible) or Secure Boot was disabled. That's why kernel updates are handled in openSUSE:Maintenance. Michal Kubecek ___ Evergreen mai

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-26 Thread Michal Kubecek
On úterý 26. dubna 2016 15:02 Marcus Meissner wrote: > We have a fresh 3.12 kernel in QA, at > http://download.opensuse.org/repositories/openSUSE:/Maintenance:/4989/openSUSE_Leap_42.1_Update/ > > Could people test it? Should be http://download.opensuse.org/repositories/openSUSE:/Maintenance:/496

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-27 Thread Michal Kubecek
On Tue, Apr 26, 2016 at 03:26:06PM +0200, Marcus Meissner wrote: > On Tue, Apr 26, 2016 at 03:12:57PM +0200, Michal Kubecek wrote: > > On úterý 26. dubna 2016 15:02 Marcus Meissner wrote: > > > We have a fresh 3.12 kernel in QA, at > > > http://download.opensus

Re: [Evergreen] Where's the last 3.12 kernel update for 13.1

2016-04-27 Thread Michal Kubecek
r patch -r tmp zypper rr tmp If you do this often, you can write a script. Michal Kubecek ___ Evergreen mailing list Evergreen@lists.rosenauer.org http://lists.rosenauer.org/mailman/listinfo/evergreen

[Evergreen] FYI: USB storage (UAS) problems with 3.12 kernels on openSUSE 13.1

2016-05-05 Thread Michal Kubecek
the Evergreen 13.1 kernel to allow using usb-storage for all UAS capable devices without requiring the per-device quirks. I'm not sure how much risk this would be. Michal Kubecek ___ Evergreen

Re: [Evergreen] latest samba update broken for Opensuse 13.1

2016-05-13 Thread Michal Kubecek
lete disaster... If it's so bad, it' a pity you didn't test it and report the problems when I made the preliminary update available and asked people who (unlike me) actually use Samba for something nontrivial to test it. Mic

Re: [Evergreen] Patch for p7zip (CVE-2016-2335)

2016-07-20 Thread Michal Kubecek
On Wed, Jul 20, 2016 at 08:53:36AM +0200, Bruno Friedmann wrote: > On mardi, 19 juillet 2016 22.24:46 h CEST Christian wrote: > > Am 19.07.2016 um 19:24 schrieb Bruno Friedmann: > > > On mardi, 19 juillet 2016 13.53:18 h CEST Till Dörges wrote: > > > > > > I guess it will be mandatory to open a ne

Re: [Evergreen] Q: os13.1 with kernel 3.12

2016-08-24 Thread Michal Kubecek
On Wednesday, 24 August 2016 20:28 Achim Klausmann (V) wrote: > Hello, > > is there back-ported Code from kernel 4.x in the evergreen kernel > 3.12? Is that memory related? There is quite a lot of backports from 4.x mainline in Evergreen 13.1 kernel (1802 patches at the moment). Some of those ar

Re: [Evergreen] AppArmor change_hat failures with kernel 3.12

2016-08-30 Thread Michal Kubecek
by mainline commit 29b3822f1e13. You can find SLE12-SP1 sources at http://kernel.suse.com/branches/SLE12-SP1 I'm not mirroring evergreen 13.1 kernel sources to a public location at the moment but if there is interest, I can push them to github.

Re: [Evergreen] new kernel for 11.4

2016-11-04 Thread Michal Kubecek
On Fri, Nov 04, 2016 at 06:14:49PM +0100, Simon Becherer wrote: > > i am surprised, today i recogniced that you have a kernel > update for 11.4? is this correct? > from 3.0.101-102.1 to 3.0.101-105.1 It was supposed to be just an update fixing recent serious vulnerability known as "Dirty Cow" (CV