Kernel vulnerabilities

Releases and other announcements
Forum rules
Section reserved for the team. You can reply to announcements here but not post new topics.

Kernel vulnerabilities

Postby Husse on Sat Feb 06, 2010 11:17 am

Kernel updates for in all 10 vulnerabilities have been released
If I count correctly seven of these are for a local attacker
Nevertheless it may be a good idea to upgrade your kernel
Read about the ups and downs of that here
This is not without some risk to your system as these are level 5 updates and could potentially break your system
You have to reboot after this update
Luckily, if they do, you can just boot into the old kernel
Edit - both the old and the new kernel will have an entry in Grub
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Linux Mint is funded by ads and donations.
 

Re: Kernel vulnerabilities

Postby fwc on Sat Feb 06, 2010 12:25 pm

How do you boot into the old if it doesn't work?
User avatar
fwc
Level 4
Level 4
 
Posts: 249
Joined: Sun Feb 15, 2009 12:23 am

Re: Kernel vulnerabilities

Postby Boo on Sat Feb 06, 2010 4:20 pm

the old kernels will be listed in the grub boot menu.
just use the arrow keys to navigate to the desired one and hit enter.

Boo
Image
Now where was i going? Oh yes, crazy!
User avatar
Boo
Level 8
Level 8
 
Posts: 2364
Joined: Mon Mar 26, 2007 7:48 am

Re: Kernel vulnerabilities

Postby Husse on Sat Feb 06, 2010 4:33 pm

I have now installed the final Helena Main on my laptop and all level 4 and 5 updates with good result, the Broadcom STA driver was not broken and on my desktop the ATI fglrx driver was not broken
Updates seem to go smoother now, but in the link above there are reports of failed updates
Any kernel update leaves a link to the old kernel in Grub so you can boot with it and it is possible to remove the new kernel if you cant' use it
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Re: Kernel vulnerabilities

Postby Mr. B on Mon Feb 08, 2010 3:52 pm

Does one need to update everything from the 4 and/or 5 level updates in Mint 8 Helena or can one just only install the 2.6.31-19 kernel stuff?
Last edited by Mr. B on Mon Feb 08, 2010 6:04 pm, edited 1 time in total.
User avatar
Mr. B
Level 3
Level 3
 
Posts: 146
Joined: Sun Apr 27, 2008 9:03 am

Re: Kernel vulnerabilities

Postby red-e-made on Mon Feb 08, 2010 5:33 pm

Running Mint 7 XFCE here, and just installed all Level 4 and 5 updates. Rebooted. No problems whatsoever. Thanks for the heads up, Husse.
User avatar
red-e-made
Level 5
Level 5
 
Posts: 525
Joined: Sat Jul 14, 2007 11:31 am

Re: Kernel vulnerabilities

Postby mmesantos1 on Mon Feb 08, 2010 8:11 pm

Thanks for the heads up. I am running Mint 8 Main x32 and updated to the latest PAE kernel as well as all Level 4 & 5 updates and all is working well. :)
Image
User avatar
mmesantos1
Level 8
Level 8
 
Posts: 2276
Joined: Tue Jan 29, 2008 9:14 pm
Location: VA. USA

Re: Kernel vulnerabilities

Postby Husse on Tue Feb 09, 2010 6:11 am

The level 4 updates available now is for xorg so they are not necessary to secure you from this threat, it's the level 5 kernel things that are important
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Re: Kernel vulnerabilities

Postby Mr. B on Tue Feb 09, 2010 9:36 am

That's all i needed to know. Thank you Husse. :)
User avatar
Mr. B
Level 3
Level 3
 
Posts: 146
Joined: Sun Apr 27, 2008 9:03 am

Re: Kernel vulnerabilities

Postby z06gal on Tue Feb 09, 2010 12:58 pm

I just updated via synaptic and all seems to be fine. Thanks for the info Husse. :D
z06gal
Level 5
Level 5
 
Posts: 668
Joined: Sat Jun 13, 2009 7:16 pm

Re: Kernel vulnerabilities

Postby fwc on Tue Feb 09, 2010 11:23 pm

Which exact files in the updater do I need if I am running 32bit, Gnome Helena?
User avatar
fwc
Level 4
Level 4
 
Posts: 249
Joined: Sun Feb 15, 2009 12:23 am

Re: Kernel vulnerabilities

Postby Husse on Wed Feb 10, 2010 5:54 am

fwc wrote:Which exact files in the updater do I need if I am running 32bit, Gnome Helena?

I don't have an unupdated system any more but as far as I remember all the level 5 ones, except possibly an update to hal which I think was there, or maybe not there could be new ones
Remember that this can break your system and that you can use the old kernel in that case
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Re: Kernel vulnerabilities

Postby fwc on Thu Feb 11, 2010 8:19 am

Husse wrote:
fwc wrote:Which exact files in the updater do I need if I am running 32bit, Gnome Helena?

I don't have an unupdated system any more but as far as I remember all the level 5 ones, except possibly an update to hal which I think was there, or maybe not there could be new ones
Remember that this can break your system and that you can use the old kernel in that case

aha! thanks very much. It worked but I was wondering if it would be any faster or just patch security holes. Thanks for all the info.
User avatar
fwc
Level 4
Level 4
 
Posts: 249
Joined: Sun Feb 15, 2009 12:23 am

Re: Kernel vulnerabilities

Postby SL_DON on Thu Feb 11, 2010 5:55 pm

Noob user here just did the kernel update and so far so good.

just would like to know how long the old kernel will still be in grub and if its permanent how to remove it once i am satisfied that my system is stable.
If its not Broken........You aren't trying hard enough
SL_DON
Level 1
Level 1
 
Posts: 4
Joined: Sat Jan 30, 2010 4:55 pm
Location: Canada

Re: Kernel vulnerabilities

Postby newW2 on Fri Feb 12, 2010 12:40 am

First use this command to see the list of the installed kernels in your Ubuntu

$ dpkg --get-selections | grep linux-image

Now for example try to delete the oldest one (change oldest kernel with your oldest one)

# $ sudo apt-get purge [oldest-kernel-from grep command above]

If the kernel you try to uninstall is not updated, you will get a message to update first before you continue. Update then the kernel and then uninstall that old kernel and the updates using the same command above.

Important : Do not uninstall the linux-image-generic as it is necessary to receive updates of the kernel.

[note if satisfied and using grub2; then run update-grub as root to cleanup grub]

Source is from one of our sponsors that has many a good how-to and/or review:
http://www.unixmen.com/linux-tutorials/ ... -in-ubuntu
User avatar
newW2
Level 6
Level 6
 
Posts: 1081
Joined: Fri Apr 06, 2007 10:24 am
Location: USA

Re: Kernel vulnerabilities

Postby dan j on Sat Feb 13, 2010 12:43 am

Use ubuntu-tweak to remove old kernels.

http://ubuntu-tweak.com/
dan j
Level 1
Level 1
 
Posts: 1
Joined: Fri Feb 12, 2010 10:25 pm

Re: Kernel vulnerabilities

Postby blklime on Fri Feb 19, 2010 10:18 pm

How does one update the kernel?
blklime
Level 1
Level 1
 
Posts: 23
Joined: Fri Feb 12, 2010 10:46 pm
Location: United States of America

Re: Kernel vulnerabilities

Postby mmesantos1 on Sat Feb 20, 2010 1:18 am

blklime wrote:How does one update the kernel?


Set Mint update for level 5 and then update. Once complete reboot your PC. After that you can remove old kernel. You can reboot again to be sure, well I do but that's it.
Image
User avatar
mmesantos1
Level 8
Level 8
 
Posts: 2276
Joined: Tue Jan 29, 2008 9:14 pm
Location: VA. USA

Re: Kernel vulnerabilities

Postby icekool on Sun Mar 07, 2010 4:00 pm

Hi everyone, I just wanted to report that I applied all level 4 & 5 updates including the Kernel to 2.6.31-20, all from Mint Update manager without any problem or error whatsoever, I rebooted, tested everything several times just to make sure, then installed Ubuntu Tweak and cleaned out caches and old Kernel....everything works perfect :D

Hope this helps anyone considering doing the same, btw, I think that Tweak is a really great app, it makes it very easy for a total newbie like me to do some slightly more serious stuff while I learn the OS.

Regards to all :)
icekool
Level 1
Level 1
 
Posts: 44
Joined: Wed Feb 10, 2010 9:40 pm

Re: Kernel vulnerabilities

Postby Kendoori on Sun Mar 21, 2010 5:44 pm

I also updated with no issues. I was motivated to do this because of issues with my MSI U100 and the Bison webcam. Updating the kernel per level 5 releases fixed this for me.
Kendoori
Level 1
Level 1
 
Posts: 8
Joined: Thu Jul 09, 2009 12:51 pm

Linux Mint is funded by ads and donations.
 
Next

Return to Releases & Announcements

Who is online

Users browsing this forum: No registered users and 4 guests