Re: openSUSE-SU-2013:0395-1: important: kernel: fixed local privilege escalation

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Re: openSUSE-SU-2013:0395-1: important: kernel: fixed local privilege escalation

Joe Morris
On 03/06/2013 12:04 AM, [hidden email] wrote:

>    openSUSE Security Update: kernel: fixed local privilege escalation
> ______________________________________________________________________________
>
> Announcement ID:    openSUSE-SU-2013:0395-1
> Rating:             important
> References:         #797175 #799209 #800280 #801178 #801782 #802153
>                     #804738 #805633
> Cross-References:   CVE-2012-5374 CVE-2013-0160 CVE-2013-0216
>                     CVE-2013-0231 CVE-2013-1763
> Affected Products:
>                     openSUSE 12.2
> ______________________________________________________________________________
>
>    An update that solves 5 vulnerabilities and has three fixes
>    is now available.
>
Why is this (and the latest couple of) updates not yet showing up in the
update repository? This one is in 12.2-test, and the pidgin and libqt4 I
don't yet see in any update repository. Just wondering what the problem
is. I went ahead and downloaded the kernel update manually from
12.2-test and updated, but that seems at best a workaround. The
announcement above says it is now available, but is it really?

Joe

--
To unsubscribe, e-mail: [hidden email]
To contact the owner, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: openSUSE-SU-2013:0395-1: important: kernel: fixed local privilege escalation

Eoin Kirwan-3
On Fri 08 Mar 2013 07:46:56 Joe Morris wrote:
>
> Why is this (and the latest couple of) updates not yet showing up in the
> update repository? This one is in 12.2-test, and the pidgin and libqt4 I
> don't yet see in any update repository. Just wondering what the problem
> is. I went ahead and downloaded the kernel update manually from
> 12.2-test and updated, but that seems at best a workaround. The
> announcement above says it is now available, but is it really?

The 12.1 kernel update announced on Tuesday isn't available either.

We're also getting 11.4 updates announced here, shouldn't they be on an
Evergreen mailing list?


Eoin

--
To unsubscribe, e-mail: [hidden email]
To contact the owner, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: openSUSE-SU-2013:0395-1: important: kernel: fixed local privilege escalation

Marcus Meissner
On Fri, Mar 08, 2013 at 11:55:43PM +0000, [hidden email] wrote:

> On Fri 08 Mar 2013 07:46:56 Joe Morris wrote:
> >
> > Why is this (and the latest couple of) updates not yet showing up in the
> > update repository? This one is in 12.2-test, and the pidgin and libqt4 I
> > don't yet see in any update repository. Just wondering what the problem
> > is. I went ahead and downloaded the kernel update manually from
> > 12.2-test and updated, but that seems at best a workaround. The
> > announcement above says it is now available, but is it really?
>
> The 12.1 kernel update announced on Tuesday isn't available either.

There seems to be a synchronization issue...

I mailed the responsible people yesterday, and I hope they read it today
at some point. :/

> We're also getting 11.4 updates announced here, shouldn't they be on an
> Evergreen mailing list?

Evergreen itself is also part of the openSUSE community projects "cloud",
so it kind of also belongs here.

The goal is also to move Evergreen closer to regular openSUSE maintenance.

Ciao, Marcus
--
To unsubscribe, e-mail: [hidden email]
To contact the owner, e-mail: [hidden email]