Pending Squeeze Security upload? (Was: Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744)

2014-02-27 Thread Ian Campbell
On Fri, 2014-02-28 at 02:45 +, Ian Campbell wrote: > Looks like squeeze4 is the latest actual upload BTW, at least > according to the PTS. squeeze5 has a bunch of stuff in it... bugfix/all/CVE-2013-6378.patch which was added to the series in 48squeeze5 in early January is missing, so things d

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-27 Thread Ian Campbell
On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > > On Sat, 2014-02-22 at 22:56 +, Ben Hutchings wrote: > > > On Mon, 2013-09-30 at 20:25 +1000, Kris Shannon wrote: > > > > I was eagerly awating the release of linux-2.6_2.6.32-48s

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Kris Shannon
On 25/02/2014 7:44 am, Ben Hutchings wrote: On Mon, 2014-02-24 at 20:14 +, Ian Campbell wrote: On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: A regression due to a security fix is also a valid reason for a further security update. Ah, I'd forgotten that was why this was. I'll try

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Wei Liu
On Mon, Feb 24, 2014 at 09:30:41PM +, Ian Campbell wrote: > On Mon, 2014-02-24 at 21:23 +, Wei Liu wrote: > > On Mon, Feb 24, 2014 at 08:14:31PM +, Ian Campbell wrote: > > > On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > > > > On Mon, 2014-02-24 at 15:48 +, Ian Campbell w

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Wei Liu
On Mon, Feb 24, 2014 at 08:14:31PM +, Ian Campbell wrote: > On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > > On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > > > The other question is whether there will be any more updates to the > > > Squeeze kernel at all, aren't we into se

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Ian Campbell
On Mon, 2014-02-24 at 21:23 +, Wei Liu wrote: > On Mon, Feb 24, 2014 at 08:14:31PM +, Ian Campbell wrote: > > On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > > > On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > > > > The other question is whether there will be any more upd

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Ben Hutchings
On Mon, 2014-02-24 at 20:14 +, Ian Campbell wrote: > On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > > On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > > > The other question is whether there will be any more updates to the > > > Squeeze kernel at all, aren't we into security

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Ian Campbell
On Mon, 2014-02-24 at 20:11 +, Ben Hutchings wrote: > On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > > The other question is whether there will be any more updates to the > > Squeeze kernel at all, aren't we into security fixes only mode for > > Squeeze by now? > > A regression due t

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Ben Hutchings
On Mon, 2014-02-24 at 15:48 +, Ian Campbell wrote: > On Sat, 2014-02-22 at 22:56 +, Ben Hutchings wrote: > > On Mon, 2013-09-30 at 20:25 +1000, Kris Shannon wrote: > > > I was eagerly awating the release of linux-2.6_2.6.32-48squeeze4 > > > because it would fix #701744 (fallout from XSA-39:

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Wei Liu
On Mon, Feb 24, 2014 at 03:48:26PM +, Ian Campbell wrote: > On Sat, 2014-02-22 at 22:56 +, Ben Hutchings wrote: > > On Mon, 2013-09-30 at 20:25 +1000, Kris Shannon wrote: > > > I was eagerly awating the release of linux-2.6_2.6.32-48squeeze4 > > > because it would fix #701744 (fallout from

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-24 Thread Ian Campbell
On Sat, 2014-02-22 at 22:56 +, Ben Hutchings wrote: > On Mon, 2013-09-30 at 20:25 +1000, Kris Shannon wrote: > > I was eagerly awating the release of linux-2.6_2.6.32-48squeeze4 > > because it would fix #701744 (fallout from XSA-39: Linux netback DoS > > via malicious guest ring) > > > > > >

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-22 Thread Ben Hutchings
On Sat, 2014-02-22 at 22:56 +, Ben Hutchings wrote: [...] > As a temporary workaround I think that turning off TSO on netfront would > avoid the problem, but it will reduce network TX performance. That's: ethtool -K $IFACE tso off substituting the name of the network interface for $I

Re: linux-2.6_2.6.32-48squeeze4 and Bug #701744

2014-02-22 Thread Ben Hutchings
On Mon, 2013-09-30 at 20:25 +1000, Kris Shannon wrote: > I was eagerly awating the release of linux-2.6_2.6.32-48squeeze4 > because it would fix #701744 (fallout from XSA-39: Linux netback DoS > via malicious guest ring) > > > It turns out I should have read the bug report more closely. > > #70

linux-2.6_2.6.32-48squeeze4 and Bug #701744

2013-09-30 Thread Kris Shannon
I was eagerly awating the release of linux-2.6_2.6.32-48squeeze4 because it would fix #701744 (fallout from XSA-39: Linux netback DoS via malicious guest ring) It turns out I should have read the bug report more closely. #701744 was only about the xen-netback side of things. I haven't been able