Author: JT Smith
Category:
Author: JT Smith
Category:
Author: JT Smith
From: Marcelo Tosatti <marcelo@conectiva.com.br>
To: lkml <linux-kernel@vger.kernel.org>
Subject: Linux 2.4.17-rc2
Date: Tue, 18 Dec 2001 18:26:03 -0200 (BRST)
Cc: Linus Torvalds <torvalds@transmeta.com>
Hi,
So here it goes 2.4.17-rc2... as expected, bugfixes only.
rc2:
- Fix potential oops with via-rhine (Andrew Morton)
- sysvfs: mark inodes as bad in case of read
failure (Christoph Hellwig)
- NTFS bugfixes (Anton Altaparmakov)
- Fix Netfilter oops (Edward Killips)
- Direct IO error handling fix (Masaroni Goto)
- Fix loop device deadlock (Andrea Arcangeli)
- Make some erroneously global spinlocks
static (David C. Hansen)
- Avoid i810 driver from oopsing with 830ME (Robert Love)
- Reiserfs fixes (Oleg Drokin/Chris Mason)
- Fix VM "not-swapping" issue with lowmem
machines (Rik van Riel)
- Make kernel try a bit harder to shrink caches
instead swapping out (me)
- Make NCR5380 compile builtin (Erik Andersen)
- More __devexit_p fixes (Daniel T. Chen)
- devfs bugfixes (Richard Gooch)
rc1:
- Finish MODULE_LICENSE fixups for fs/nls (Mark Hymers)
- Console race fix (Andrew Morton/Robert Love)
- Configure.help update (Eric S. Raymond)
- Correctly fix Direct IO bug (Linus Benedict Torvalds)
- Turn off aacraid debugging (Alan Cox)
- Added missing spinlocking in do_loopback() (Alexander Viro)
- Added missing __devexit_p() in i82092
pcmcia driver (Keith Owens)
- ns83820 zerocopy bugfix (Benjamin LaHaise)
- Fix VM problems where cache/buffers didn't get
freed (me)
pre8:
- ext3 quota fix (Neil Brown)
- Add __devexit_p() to ISDN driver (Kai Germaschewski)
- Declare missing function on fdomain.h (Eyal Lebedinsky)
- Add Sony Vaio PCG-Z600NE to broken APM
reporting blacklist (Kai Germaschewski)
- ns83820 driver update (Benjamin LaHaise)
- pas16 driver cleanup (Alan Cox)
- disable console flush on secondary CPUs on
IA64 (Andrew Morton)
- fix typo on parport's ChangeLog (Tim Waugh)
- fix use count for multiple queued requests on
closed fd (Douglas Gilbert)
- Check return value of get_user() on
set_vesa_blanking (Jeff Garzik)
- Remove asm/segment.h include from nbd (Jeff Garzik)
- Guard sysrq.h against multiple inclusion (Jeff Garzik)
- Minor PCI skeleton changes (Jeff Garzik)
- Add via rhine MMIO to Configure.help (Jeff Garzik)
- Jeff Garzik is not the via82cxxx driver
maintainer anymore: "No time, no hardware". (Jeff Garzik)
- Remove old tulip documentation (Jeff Garzik)
- Avoid direct IO's "misunderstanding" of which
block device it should use (Masanori Goto)
- Remove mcheck_init() call from processor
dependant code and put it in unified codepath (Dave Jones)
- Netfilter bugfixes (Harald Welte)
pre7:
- More USB updates (Greg KH)
- Add missing checks on shmat() (Christoph Rohland)
- ymfpci update (Pete Zaitcev)
- Add aacraid driver (Alan Cox)
- Actually apply some of the Alan's changes
which were on pre6 changelog. (silly me)
- Clean up t128 SCSI driver (Alan Cox)
- Clean up dtc SCSI driver (Alan Cox)
- Undo lcall patch from -pre6 (me)
- More ISDN updates (Kai Germaschewski)
pre6:
- ISDN fixes (Kai Germaschewski)
- Eicon driver updates (Kai Germaschewski)
- ymfpci update (Pete Zaitcev)
- Fix multithread coredump deadlock (Manfred Spraul)
- Support /dev/kmem access to vmalloc space (Marc Boucher)
- ext3 fixes/enhancements (Andrew Morton)
- Add IT8172G driver to Config.in/Makefile (Giacomo Catenazzi)
- Configure.help update (Eric S. Raymond)
- Create __devexit_p() function and use that on
drivers which need it to make it possible to
use newer binutils (Keith Owens)
- Make PCMCIA compile without PCI support (Paul Mackerras)
- Use copy_user_highpage instead copy_highpage
on COW path. (David S. Miller)
- Cacheline align some more performance
critical spinlocks (Anton Blanchard)
- sonypi driver update (Michael C.B. Ashley/Bob Donnelly)
- direct render for some SiS cards (Torsten Duwe/Alan Cox)
- full handling of the NFSv3 'jukebox' feature (Trond Myklebust)
- NFS performance improvements (Trond Myklebust)
- More parport fixes (Tim Waugh)
- Fix lots of core NCR5380 bugs (Alan Cox)
- NCR5380/PAS driver update (Alan Cox)
- Add aacraid to the SCSI list (Alan Cox)
- fdomain driver fixes (Alan Cox)
pre5:
- 8139too fixes (Andreas Dilger)
- sym53c8xx_2 update (Gerard Roudier)
- loopback deadlock bugfix (Jan Kara)
- Yet another devfs update (Richard Gooch)
- Enable K7 SSE (John Clemens)
- Make grab_cache_page return NULL instead
ERR_PTR: callers expect NULL on failure (Christoph Hellwig)
- Make ide-{disk-floppy} compile without
PROCFS support (Robert Love)
- Another ymfpci update (Pete Zaitcev)
- indent NCR5380.{c,h}, g_NCR5380.{c,h}, plus
NCR5380 fix (Alan Cox)
- SPARC32/64 update (David S. Miller)
- Fix atyfb warnings (David S. Miller)
- Make bootmem init code correctly align
bootmem data (David S. Miller)
- Networking updates (David S. Miller)
- Fix scanning luns > 7 on SCSI-3 devices (Michael Clark)
- Add sparse lun hint for Chaparral G8324
Fibre-SCSI controller (Michael Clark)
- Really apply sg changes (me)
- Parport updates (Tim Waugh)
- ReiserFS updates (Vladimir V. Saveliev)
- Make AGP code scan all kinds of devices:
they are not always video ones (Alan Cox)
- EXPORT_NO_SYMBOLS in floppy.c (Alan Cox)
- Pentium IV Hyperthreading support (Alan Cox)
pre4:
- Added missing tcp_diag.c and tcp_diag.h (me)
pre3:
- Enable ppro errata workaround (Dave Jones)
- Update tmpfs documentation (Christoph Rohland)
- Fritz!PCIv2 ISDN card support (Kai Germaschewski)
- Really apply ymfpci changes (Pete Zaitcev)
- USB update (Greg KH)
- Adds detection of more eepro100 cards (Troy A. Griffitts)
- Make ftruncate64() compliant with SuS (Andrew Morton)
- ATI64 fb driver update (Geert Uytterhoeven)
- Coda fixes (Jan Harkes)
- devfs update (Richard Gooch)
- Fix ad1848 breakage in -pre2 (Alan Cox)
- Network updates (David S. Miller)
- Add cramfs locking (Christoph Hellwig)
- Move locking of page_table_lock on expand_stack
before accessing any vma field (Manfred Spraul)
- Make time monotonous with gettimeofday (Andi Kleen)
- Add MODULE_LICENSE(GPL) to ide-tape.c (Mikael Pettersson)
- Minor cs46xx ioctl fix (Thomas Woller)
pre2:
- Remove userland header from bonding driver (David S. Miller)
- Create a SLAB for page tables on i386 (Christoph Hellwig)
- Unregister devices at shaper unload time (David S. Miller)
- Remove several unused variables from various
places in the kernel (David S. Miller)
- Fix slab code to not blindly trust cc_data():
it may be not valid on some platforms (David S. Miller)
- Fix RTC driver bug (David S. Miller)
- SPARC 32/64 update (David S. Miller)
- W9966 V4L driver update (Jakob Jemi)
- ad1848 driver fixes (Alan Cox/Daniel T. Cobra)
- PCMCIA update (David Hinds)
- Fix PCMCIA problem with multiple PCI busses (Paul Mackerras)
- Correctly free per-process signal struct (Dave McCracken)
- IA64 PAL/signal headers cleanup (Nathan Myers)
- ymfpci driver cleanup (Pete Zaitcev)
- Change NLS "licenses" to be "GPL/BSD" instead
only BSD. (Robert Love)
- Fix serial module use count (Russell King)
- Update sg to 3.1.22 (Douglas Gilbert)
- ieee1394 update (Ben Collins)
- ReiserFS fixes (Nikita Danilov)
- Update ACPI documentantion (Patrick Mochel)
- Smarter atime update (Andrew Morton)
- Correctly mark ext2 sb as dirty and sync it (Andrew Morton)
- IrDA update (Jean Tourrilhes)
- Count locked buffers at
balance_dirty_state(): Helps interactivity under
heavy IO workloads (Andrew Morton)
- USB update (Greg KH)
- ide-scsi locking fix (Christoph Hellwig)
pre1:
- Change USB maintainer (Greg Kroah-Hartman)
- Speeling fix for rd.c (From Ralf Baechle's tree)
- Updated URL for bigphysmem patch in v4l docs (Adrian Bunk)
- Add buggy 440GX to broken pirq blacklist (Arjan Van de Ven)
- Add new entry to Sound blaster ISAPNP list (Arjan Van de Ven)
- Remove crap character from Configure.help (Niels Kristian Bech Jensen)
- Backout erroneous change to lookup_exec_domain (Christoph Hellwig)
- Update osst sound driver to 1.65 (Willem Riede)
- Fix i810 sound driver problems (Andris Pavenis)
- Add AF_LLC define in network headers (Arnaldo Carvalho de Melo)
- block_size cleanup on some SCSI drivers (Erik Andersen)
- Added missing MODULE_LICENSE("GPL") in some (Andreas Krennmair)
modules
- Add ->show_options() to super_ops and
implement NFS method (Alexander Viro)
- Updated i8k driver (Massimo Dal Zoto)
- devfs update (Richard Gooch)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Category:
Author: JT Smith
Category:
Author: JT Smith
Category:
Author: JT Smith
________________________________________________________________________
Mandrake Linux Security Update Advisory
________________________________________________________________________
Package name: kerberos
Date: December 17th, 2001
Advisory ID: MDKSA-2001:093
Affected versions: 8.1
________________________________________________________________________
Problem Description:
A buffer overflow exists in the telnet portion of Kerberos that could
provide root access to local users. MDKSA-2001:068 provided a similar
fix to the normal telnet packages, but the Kerberized equivalent was
not updated previously.
________________________________________________________________________
References:
________________________________________________________________________
Please verify the update prior to upgrading to ensure the integrity of
the downloaded package. You can do this with the command:
rpm --checksig package.rpm
You can get the GPG public key of the Mandrake Linux Security Team at:
https://www.mandrakesecure.net/RPM-GPG-KEYS
If you use MandrakeUpdate, the verification of md5 checksum and GPG
signature is performed automatically for you.
Mandrake Linux 8.1:
4d11dde1971289c6c53c61135b6c7ce2 8.1/RPMS/ftp-client-krb5-1.2.2-15.1mdk.i586.rpm
fb4a3cc348848e40e1e65563da04c701 8.1/RPMS/ftp-server-krb5-1.2.2-15.1mdk.i586.rpm
036071f39acb7b655ea885b2f2a64a2a 8.1/RPMS/krb5-devel-1.2.2-15.1mdk.i586.rpm
39f2514433f257671599858990e60f28 8.1/RPMS/krb5-libs-1.2.2-15.1mdk.i586.rpm
deee23f89cb5c8ffe2a078360be9866f 8.1/RPMS/krb5-server-1.2.2-15.1mdk.i586.rpm
14ee0a912a7863ff34021a93606e102c 8.1/RPMS/krb5-workstation-1.2.2-15.1mdk.i586.rpm
9c9c753a18ffc51d96c85e0ad0fc19ab 8.1/RPMS/telnet-client-krb5-1.2.2-15.1mdk.i586.rpm
0822f5d15a549a8ca4e4d396f293c7b6 8.1/RPMS/telnet-server-krb5-1.2.2-15.1mdk.i586.rpm
938a05177810f852a22ec5deff24409b 8.1/SRPMS/krb5-1.2.2-15.1mdk.src.rpm
Mandrake Linux 8.1 (IA64):
4435326de1339135105e2daee6c6bc92 ia64/8.1/RPMS/ftp-client-krb5-1.2.2-15.1mdk.ia64.rpm
97f011a3b2d70e74a7ea80bd1986ac5d ia64/8.1/RPMS/ftp-server-krb5-1.2.2-15.1mdk.ia64.rpm
74ab9ec600deefa1026ec156518b9033 ia64/8.1/RPMS/krb5-devel-1.2.2-15.1mdk.ia64.rpm
859f16d32d535fd0a33b62c91c6072e4 ia64/8.1/RPMS/krb5-libs-1.2.2-15.1mdk.ia64.rpm
2d75f47ebc7e325a52e2f94ed8f1212f ia64/8.1/RPMS/krb5-server-1.2.2-15.1mdk.ia64.rpm
4638aed2e40949028546aeaf8429f2b9 ia64/8.1/RPMS/krb5-workstation-1.2.2-15.1mdk.ia64.rpm
5b2569102e5ba35897cdfecf39313c0d ia64/8.1/RPMS/telnet-client-krb5-1.2.2-15.1mdk.ia64.rpm
6268d0076cd1d9ad925c9e826f7f2463 ia64/8.1/RPMS/telnet-server-krb5-1.2.2-15.1mdk.ia64.rpm
938a05177810f852a22ec5deff24409b ia64/8.1/SRPMS/krb5-1.2.2-15.1mdk.src.rpm
________________________________________________________________________
Bug IDs fixed (see https://qa.mandrakesoft.com for more information):
________________________________________________________________________
Before applying this update, make sure all previously released updates
relevant to your system have been applied. To upgrade automatically,
use MandrakeUpdate.
If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".
You can download the updates directly from one of the mirror sites
listed at:
http://www.linux-mandrake.com/en/ftp.php3.
Updated packages are available in the "updates/[ver]/RPMS/" directory.
For example, if you are looking for an updated RPM package for
Mandrake Linux 8.1, look for it in "updates/8.1/RPMS/". Updated source
RPMs are available as well, but you generally do not need to download
them.
Please be aware that sometimes it takes the mirrors a few hours to
update.
You can view other security advisories for Mandrake Linux at:
http://www.linux-mandrake.com/en/security/
If you want to report vulnerabilities, please contact
security@linux-mandrake.com
________________________________________________________________________
Mandrake Linux has several security-related mailing list services that
anyone can subscribe to. Information on these lists can be obtained by
visiting:
http://www.mandrakesecure.net/en/mlist.php
________________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
security@linux-mandrake.com>
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org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=0ahQ
-----END PGP PUBLIC KEY BLOCK-----
Author: JT Smith
Installation
The Mandrake installation beats even SuSE’s, which is relatively comprehensive
and trouble-free. The first issue for me was whether I’d get the same fatal read-errors
I got from Red Hat and SuSE with my CD-ROMs set to cable select, as the Dell
factory likes them. This is important because Compaq, Gateway and HP also like
this arrangement, and Harry is most likely using an OEM box.
With Red Hat the installation failed, and the documentation was inadequate to sort
out the issue. With SuSE it failed as well, but the YaST installer prominently offers a
safe-mode installation, and the documentation prominently urges this whenever
there’s a problem. The user may never know why his first attempt failed, but his
second will go all right so long as he follows directions.
Again I set up my two CD-ROMs and two HDDs with cable select, and ran
Mandrake’s DrakX installer. It handled the CS arrangement flawlessly. I was so
surprised that later I switched everything back to master/slave configs and
re-installed, but that worked fine as well.
So on the Harry test I give an F to Red Hat for having no knowledge of the CS issue
and no useful recommendations; a C+ to SuSE for making it easy for Harry to get it
right the second time around; and an A to Mandrake for having no such issue at all.
The second issue for me is my networking scheme, which, while not quite an
out-of-the-box setup, is by no means over the top. Perhaps a bit eccentric by Harry
standards, I’ll allow.
I’m using a DSL modem, ethernet cards and a router to connect my machines to
Verizon’s DSL service. I need a PPPoE client running. Red Hat took me hours to
configure; and SuSE never did work due to some lame-assed PPPoE client I was
told to fetch from their Web site (hello!). Win-XP never worked either, because it was
convinced beyond a shadow of a doubt that it had already installed all the software
needed to run my hardware and arrogantly refused to be corrected.
And Mandrake? It detected my ethernet card correctly, and when I installed ADSL it
popped in a handy PPPoE client and connected the first time. I mean, immediately
after configuring it, without any subsequent tweaking.
As for other hardware detection, Mandrake was infallible. The drives; the
wheel-mouse, the keyboard, the monitor, the video card (nVidia Ge-Force AGP 64
MB), the sound card (SoundBlaster Live), all of it. All I had to do was confirm its
choices every now and then.
Disk partitioning and formatting is an absolute breeze in expert mode, with a
graphical menu showing all your hard drives and partitions. You just click to select
a partition or a chunk of free space, and it’s selected in the configuration menu. It’s
a mousey affair, with little sliders to set the partition sizes. (Mousey is OK with me,
as is texty; what irritates me is a combination where I’m shifting back and forth
between mouse and keyboard.)
Video gremlin
Ah, but there had to be at least one hitch. The driver for my video card with
hardware acceleration which I was offered froze my machine during the boot and
nothing could make it start, not even a boot floppy.
There was an “experimental” driver which I didn’t try. The one I did try wasn’t
flagged for danger, but should have been. So I had to use the driver without
hardware acceleration which worked fine, and then download the right RPM from
nVidia’s Web site. Not a lot of trouble, but this is precisely the sort of little oversight
which will drive poor Harry to distraction; and it’s the only thing I encountered
during several different Mandrake installations which mars an otherwise outstanding
Linux eXPerience.
What to expect
There will of course be some trade-offs if you migrate from Windows. You’ll loose the
Microsoft puppy yapping at your heels, harranguing you to ‘activate’ and get a
Passport. You’ll finally be permitted to configure your machine pretty well as you
please, which may take some getting used to.
But regardless of whether you choose to run KDE or Gnome, the Linux desktop
definitely isn’t as pretty. It’s more configurable, certainly; the OS is more stable; you
get lots of free applications and utilities; and your machine will be a lot more
secure, if for no reason other than your immediate escape from that premium virus
propagator Outlook.
If you’re into graphics work, Linux is not your environment. But then you’re already
using a Mac. If you’re heavily into games, then you’re definitely stuck with
Windows. Linux’s multimedia support is crude out of the box, but there are heaps of
applications and codecs for download, so this limitation can be overcome.
So what’s it good for? Everyday chores with a lot less noise and nonsense,
especially those related to the Internet. It’s a fine choice if you want to surf the Web
and take control of the information you’re leaving behind, and which Web sites are
leaving on your machine; it’s good for using e-mail with far fewer malware dangers
(start by displaying all received messages as text only); and of course it works well
for chatting and trading files with your friends on line.
In other words, it’s better at most of what the majority of Windows addicts use their
computers for: wasting time on line.
Office applications are adequate, but not great. Personally I never use anything but
a text editor, though many people seem to relish the distractions of word-processors
and spreadsheets. Here you have several choices, none of which is as slick as its
MS Office counterpart. Sun’s StarOffice 5.2 is particularly loathsome, but recent
reports indicate that version 6.0, due out in early 2002, marks a giant step forward.
Of course Linux is a great development platform if you like to roll your own progies,
and perfect if you want to run a little Web or FTP server off your home machine. It’s
far cheaper, simpler and safer than using IIS over NT or 2K. (Also excellent in the
enterprise space, but that’s another story.)
Other virtues include the simple pleasure of ‘getting clean’ following years of
addiction to the Microsoft upgrade dependency scam. The sweet sensation of
rehabilitation alone is worth the purchase price.
If you’d like to eXPerience that sensation, Mandrake 8.1 is, hands down, the easiest
way to get started.
All Content copyright 2001 The Register
Category:
Author: JT Smith
Author: JT Smith
Category: