topic title: Security kernel upgrades
anticapitalista
Posts: 5,955
Site Admin
Joined: 11 Sep 2007
#1
All users of antiX-16 jessie series will/should upgrade their kernels, hopefully it will be automatic with an '''apt-get update && apt-get dist-upgrade''' The fixed versions are the 4.4.10 and 4.6.2 versions for 32 and 64 bit, and their gnu equivalents.

The patches fix this security issue:


========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"https://thehackernews.com/2017/02/linux-kernel-local-root.html"
linktext was:"https://thehackernews.com/2017/02/linux ... -root.html"
====================================


anticapitalista, 25 February 2017, Thessaloniki

Added: Those using proprietary drivers will need to re-install them after upgrading the kernel.
Posts: 243
Aleph
Joined: 09 Aug 2013
#2
I use the kernel 4.8.10-antix.1 (32 bits).

Is it safe? Should I change to the 4.4.10...?
anticapitalista
Posts: 5,955
Site Admin
Joined: 11 Sep 2007
#3
Aleph wrote:I use the kernel 4.8.10-antix.1 (32 bits).

Is it safe? Should I change to the 4.4.10...?
You should change to 4.4.10 or 4.6.2.
Posts: 243
Aleph
Joined: 09 Aug 2013
#4
Ok. I'll do.

Thanks anti!
Posts: 243
Aleph
Joined: 09 Aug 2013
#5
Now I have not wifi when boot. I have to stop wifi in wicd, search and connect (fortunatelly with succes).

I tried to install the 4.6.2 kernel from metapackages and I am not able.

This is the output:

Code: Select all

/tmp/temp_aptgetcall.yBceOH: línea 7: /usr/share/install-meta/Kernel-antiX_32bit_4.bm: No existe el fichero o el directorio

======================================
start installation for Kernel-antiX_32bit_4.bm
--------------------------------------
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias       
Leyendo la información de estado... Hecho
0 actualizados, 0 nuevos se instalarán, 0 para eliminar y 0 no actualizados.

search all installed packages who need locale packages, please wait ...
grep-dctrl: /var/lib/apt/lists/antix.daveserver.info_jessie_dists_jessie_main_binary-i386_Packages:3147: se esperaba un signo de dos puntos.
grep-dctrl: /var/lib/apt/lists/antix.daveserver.info_jessie_dists_jessie_main_binary-i386_Packages:3147: se esperaba un signo de dos puntos.
Edit:

Sorry, one other issue. The streamlight icon dissapeared, however it is enabled:

from .desktop-session:

Code: Select all

#!/bin/bash
# Puts a volume icon on the taskbar
volumeicon & 

# Place an icon for streamlight in the taskbar tray
streamlight-gui-launcher.sh --icon &
Posts: 125
poorguy
Joined: 11 May 2016
#6
Is this the right fixed version you are referring to.

$ inxi -Fx
System: Host: Dell-Precision-380 Kernel: 4.4.10-antix.1-486-smp i686 (32 bit gcc: 4.9.3)
Desktop: IceWM 1.3.8 Distro: antiX-16_386-full Berta Cáceres 26 June 2016

Thanks
Posts: 2,238
dolphin_oracle
Joined: 16 Dec 2007
#7
I got the upgrade (4.4.10), but not all the dkms modules rebuilt. my broadcom is down on the s21e and it doens't have an ethernet port.

edit
broadcom-sta-common and broadcom-sta-dkms downloaded onto a usb stick and manually installed on the s21e with dpkg. modules rebuilt and a reboot brought back the wireless device.
Posts: 243
Aleph
Joined: 09 Aug 2013
#8
My inxi -Fx:

Code: Select all

inxi -Fx
System:    Host: antixLuis Kernel: 4.4.10-antix.1-486-smp i686 (32 bit gcc: 4.9.3)
           Desktop: IceWM 1.3.8
           Distro: antiX-16_386-full Berta Cáceres 26 June 2016
Machine:   Device: laptop System: Hewlett-Packard product: HP Compaq nx6310 (RH325ET#ABE) v: F.09
           Mobo: Hewlett-Packard model: 30AA v: KBC Version 58.12
           BIOS: Hewlett-Packard v: 68YDU Ver. F.09 date: 09/15/2006
Battery    C1B5: charge: 632.3 Wh 6323000.0% condition: 0.0/0.0 Wh (100%)
           model: Hewlett-Packard Primary status: N/A
CPU:       Single core Intel Celeron M 430 (-UP-) cache: 1024 KB
           flags: (nx pae sse sse2 sse3) bmips: 3457 speed: 1728 MHz (max)
Graphics:  Card: Intel Mobile 945GM/GMS 943/940GML Express Integrated Graphics Controller
           bus-ID: 00:02.0
           Display Server: X.Org 1.16.4 drivers: intel (unloaded: modesetting,fbdev,vesa)
           Resolution: 1024x768@60.00hz
           GLX Renderer: Mesa DRI Intel 945GM x86/MMX/SSE2
           GLX Version: 2.1 Mesa 10.3.2 Direct Rendering: Yes
Audio:     Card Intel NM10/ICH7 Family High Definition Audio Controller
           driver: snd_hda_intel bus-ID: 00:1b.0
           Sound: ALSA v: k4.4.10-antix.1-486-smp
Network:   Card-1: Broadcom BCM4401-B0 100Base-TX bus-ID: 02:0e.0
           IF: N/A state: N/A speed: N/A duplex: N/A mac: N/A
           Card-2: Broadcom BCM4311 802.11b/g WLAN
           driver: b43-pci-bridge bus-ID: 08:00.0
           IF: wlan0 state: up mac: 00:14:a5:d7:db:41
Drives:    HDD Total Size: 100.0GB (34.5% used)
           ID-1: /dev/sda model: HITACHI_HTS72201 size: 100.0GB
Partition: ID-1: / size: 90G used: 31G (36%) fs: ext4 dev: /dev/sda1
           ID-2: swap-1 size: 2.17GB used: 0.00GB (0%) fs: swap dev: /dev/sda2
Sensors:   System Temperatures: cpu: 40.0C mobo: 29.0C
           Fan Speeds (in rpm): cpu: N/A
Info:      Processes: 136 Uptime: 2 min Memory: 213.6/2009.3MB
           Init: SysVinit runlevel: 5 Gcc sys: 4.9.2
           Client: Shell (bash 4.3.301) inxi: 2.3.8
Posts: 80
Rademes
Joined: 26 Dec 2016
#9
After dist-upgrade my PC stopped to boot onto Graphical mode. I had to reinstall nvidia driver.
anticapitalista
Posts: 5,955
Site Admin
Joined: 11 Sep 2007
#10
That, unfortunately, is 'normal'. I'll add a warning to the original post.