Re: [Users] [Announce] [security] Kernel RHEL6 042stab090.3

Kir Kolyshkin Sat, 07 Jun 2014 02:27:27 -0700

On 06/06/2014 09:48 PM, Stefan Priebe - Profihost AG wrote:

Oh sorry. My fault. Yes it's the same with 090.2

I tried to reproduce it locally on an CentOS x86_64 box with thefollowing set of commands,

(checking that every one of those succeeds):

    yum -y update
    yum -u install yum-utils
    rpm --import http://download.openvz.org/RPM-GPG-Key-OpenVZ

wgethttp://download.openvz.org/kernel/branches/rhel6-2.6.32-testing/042stab090.2/vzkernel-2.6.32-042stab090.2.src.rpm

    yum-builddep -y vzkernel-2.6.32-042stab090.2.src.rpm
    rpmbuild --rebuild vzkernel-2.6.32-042stab090.2.src.rpm

The end result is built kernel packages.

So, then I tried building from source+patch:

wgethttp://download.openvz.org/kernel/branches/rhel6-2.6.32-testing/042stab090.2/patches/patch-042stab090.2-combined.gz

    wget https://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.32.tar.xz
    tar xf linux-2.6.32.tar.xz
    cd linux-2.6.32
    gzip -dc ../patch-042stab090.2-combined.gz | patch -p1

wgethttp://download.openvz.org/kernel/branches/rhel6-2.6.32-testing/042stab090.2/configs/config-2.6.32-042stab090.2.x86_64

    mv config-2.6.32-042stab090.2.x86_64 .config
    make oldconfig
    make -j16

Same result -- it was built w/o errors.

So, I was not able to reproduce your issue in either way.

*Two questions:*

1. Can you please describe how you build the kernel (including the build
environment description), in a way so I will be able to reproduce it locally
(for example, something similar to the above)?

2. (Just curious) What is the reason you are building your own kernels
instead of relying on packaged binaries that we release? Sorry if I already
asked.

Kir.


Stefan

Excuse my typo sent from my mobile phone.

Am 07.06.2014 um 06:23 schrieb Kir Kolyshkin <k...@openvz.org<mailto:k...@openvz.org>>:

Kostya, can you please take a quick look?

Stefan,

Did you have the same problem with 090.2? This release (090.3) onlypatches futex code

and has nothing to do with iptables.

Also, please refrain from using private emails (or announce@) --instead use either users@

mailing list or bugzilla. Thanks!

Kir.

-------- Original Message --------
Subject:        Re: [Announce] [security] Kernel RHEL6 042stab090.3
Date:   Sat, 7 Jun 2014 00:27:37 +0200
From:   Stefan Priebe <s.pri...@profihost.ag>

To: Kir Kolyshkin <k...@openvz.org>, "annou...@openvz.org"<annou...@openvz.org>




while compiling i always get:
ERROR: "module_payload_allowed" [net/netfilter/x_tables.ko] undefined!

Stefan
Am 06.06.2014 21:05, schrieb Kir Kolyshkin:
> OpenVZ project released an updated RHEL6 based kernel. Read below for
> more information. Everyone is advised to update.
>
>
> Changes and Download
> ====================
> * Security fix for CVE-2014-3153
>
>https://openvz.org/Download/kernel/rhel6/042stab090.3
>
>
> Bug reporting
> =============
> Usehttp://bugzilla.openvz.org/   to report any bugs found.
>
>
> Other sources of info on updates
> ================================
> Seehttp://wiki.openvz.org/News   to view all the news (including updates)
> online. There you can also find RSS/Atom feed links.
>
>
> Regards,
>    OpenVZ team
>
> _______________________________________________
> Announce mailing list
>annou...@openvz.org
>https://lists.openvz.org/mailman/listinfo/announce

_______________________________________________
Users mailing list
Users@openvz.org
https://lists.openvz.org/mailman/listinfo/users

Re: [Users] [Announce] [security] Kernel RHEL6 042stab090.3

Reply via email to