Re: [SECURITY] [DSA-2115-2] New moodle packages fix several vulnerabilities

2010-10-12 Thread Florian Weimer
* Michael Gilbert: > The problem here appears to be the jump to the new upstream version > (1.8.2 to 1.8.13), which has a different dependency set. The actual problem was that the dependency set was initially different (it included additional, incorrect dependencies). This was corrected, and upg

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Marsh Ray
Thank you all for your kind responses. I think I have a much better understanding of the Debian security process now. Some out-of-context excerpts below. - Marsh On 10/12/2010 05:10 AM, Marcin Owsiany wrote: And it might be non-obvious, but some CPUs (e.g. the one in my not-so-old laptop)

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Marcin Owsiany
On Tue, Oct 12, 2010 at 05:48:23AM -0500, Jordon Bedwell wrote: > Last I checked there were ways of carrying multiple Kernels and enabling > them on need-be basis Oh, sure. I'm just pointing out that the performance hit one experiences with PAE is not the only factor to take into consideration whe

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Jordon Bedwell
On Tue, 2010-10-12 at 11:35 +0100, Marcin Owsiany wrote: > What's ubiquity? Read the follow up email where I corrected mistake please... > Enable what? Last time I checked, a given kernel image either user PAE > or not, there was no flag to control it. You read to much into the subjective usage

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Marcin Owsiany
On Tue, Oct 12, 2010 at 05:29:03AM -0500, Jordon Bedwell wrote: > On Tue, 2010-10-12 at 11:10 +0100, Marcin Owsiany wrote: > > And it might be non-obvious, but some CPUs (e.g. the one in my > > not-so-old laptop) don't support PAE, so making the default kernel use > > PAE would make debian unbootab

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Jordon Bedwell
On Tue, 2010-10-12 at 05:29 -0500, Jordon Bedwell wrote: > On Tue, 2010-10-12 at 11:10 +0100, Marcin Owsiany wrote: > > And it might be non-obvious, but some CPUs (e.g. the one in my > > not-so-old laptop) don't support PAE, so making the default kernel use > > PAE would make debian unbootable on t

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Jordon Bedwell
On Tue, 2010-10-12 at 11:10 +0100, Marcin Owsiany wrote: > And it might be non-obvious, but some CPUs (e.g. the one in my > not-so-old laptop) don't support PAE, so making the default kernel use > PAE would make debian unbootable on them. Because it's too hard to have ubiquity run a script that ch

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Sysadmin - The Well @ Poway
On 10/12/2010 03:10 AM, Marcin Owsiany wrote: On Mon, Oct 11, 2010 at 11:08:04PM -0500, Boyd Stephen Smith Jr. wrote: On Monday, October 11, 2010 17:18:34 you wrote: On 10/11/2010 12:21 PM, Boyd Stephen Smith Jr. wrote: What can be done to not disable page protections in the default kernel?

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-12 Thread Marcin Owsiany
On Mon, Oct 11, 2010 at 11:08:04PM -0500, Boyd Stephen Smith Jr. wrote: > On Monday, October 11, 2010 17:18:34 you wrote: > >On 10/11/2010 12:21 PM, Boyd Stephen Smith Jr. wrote: > >>> What can be done to not disable page protections in the default > >>> kernel? > >> > >> Enable PAE. From what I