| Summary: | [UPDATE REQUEST] kmod-20-1 | ||
|---|---|---|---|
| Product: | [ROSA-based products] ROSA Fresh | Reporter: | Evgenii Shatokhin <eugene.shatokhin> |
| Component: | Packages from Main | Assignee: | ROSA Linux Bugs <bugs> |
| Status: | VERIFIED FIXED | QA Contact: | ROSA Linux Bugs <bugs> |
| Severity: | normal | ||
| Priority: | Normal | CC: | denis.silakov, firstlevel, v.potapov |
| Version: | Fresh | Flags: | v.potapov:
qa_verified+
denis.silakov: published+ |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Platform: | --- | ROSA Vulnerability identifier: | |
| RPM Package: | ISO-related: | ||
| Bad POT generating: | Upstream: | ||
|
Description
Evgenii Shatokhin
2015-03-10 18:34:47 MSK
Advisory: kmod was updated to version 20. This version provides a number of bug fixes, including but not limited to: * Handle bogus values from ELF, making sure they don't overflow while parsing the file. * Fix leak in depmod and more leaks in error paths. * Fix race between loading modules and checking if it's loaded in the kernel. * Fix use-after-free in hash implementation causing a wrong index to be generated by depmod with out-of-tree modules. Note that the behaviour of kmod changed in this version as follows: * Calling depmod with modules creating a dependency loop will now make depmod return an error and not update the indexes. * Only the modules listed in modules.builtin index are now considered as builtin. Build lists: i586: https://abf.io/build_lists/2451985 x86_64: https://abf.io/build_lists/2451986 Hints for testing Look for possible regressions related to loading of kernel modules (new errors in the system log, etc.) as well as to insmod, rmmod, modinfo, modprobe, depmod, lsmod. Advisory: kmod was updated to version 20. This version provides a number of bug fixes, including but not limited to: * Handle bogus values from ELF, making sure they don't overflow while parsing the file. * Fix leak in depmod and more leaks in error paths. * Fix race between loading modules and checking if it's loaded in the kernel. * Fix use-after-free in hash implementation causing a wrong index to be generated by depmod with out-of-tree modules. Note that the behaviour of kmod changed in this version as follows: * Calling depmod with modules creating a dependency loop will now make depmod return an error and not update the indexes. * Only the modules listed in modules.builtin index are now considered as builtin. Build lists: i586: https://abf.io/build_lists/2451985 x86_64: https://abf.io/build_lists/2451986 Hints for testing Look for possible regressions related to loading of kernel modules (new errors in the system log, etc.) as well as to insmod, rmmod, modinfo, modprobe, depmod, lsmod. Update goes well for 32 and 64 bit The update sent to expanded testing ************************************ kmod-20-1 http://abf-downloads.rosalinux.ru/rosa2014.1/container/2451985/i586/main/release/ http://abf-downloads.rosalinux.ru/rosa2014.1/container/2451986/x86_64/main/release/ *************************** Advisory ************************* kmod was updated to version 20. This version provides a number of bug fixes, including but not limited to: * Handle bogus values from ELF, making sure they don't overflow while parsing the file. * Fix leak in depmod and more leaks in error paths. * Fix race between loading modules and checking if it's loaded in the kernel. * Fix use-after-free in hash implementation causing a wrong index to be generated by depmod with out-of-tree modules. Note that the behaviour of kmod changed in this version as follows: * Calling depmod with modules creating a dependency loop will now make depmod return an error and not update the indexes. * Only the modules listed in modules.builtin index are now considered as builtin. *************************************************************** QA Verified |