centos-announce-request at centos.org
2019-Dec-07 12:00 UTC
[CentOS] CentOS-announce Digest, Vol 178, Issue 2
Send CentOS-announce mailing list submissions to
centos-announce at centos.org
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-request at centos.org
You can reach the person managing the list at
centos-announce-owner at centos.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."
Today's Topics:
1. CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes)
2. CESA-2019:4024 Important CentOS 7 SDL Security Update
(Johnny Hughes)
----------------------------------------------------------------------
Message: 1
Date: Fri, 6 Dec 2019 23:34:10 +0000
From: Johnny Hughes <johnny at centos.org>
To: centos-announce at centos.org
Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix
Update
Message-ID: <20191206233410.GA4860 at bstore1.rdu2.centos.org>
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2019:4106
Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739
bpftool-3.10.0-1062.9.1.el7.x86_64.rpm
68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe
kernel-3.10.0-1062.9.1.el7.x86_64.rpm
dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7
kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm
e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d
kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm
16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829
kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm
2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99
kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm
3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c
kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm
63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f
kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm
0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da
kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm
4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146
kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm
06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62
kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm
d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090
perf-3.10.0-1062.9.1.el7.x86_64.rpm
8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131
python-perf-3.10.0-1062.9.1.el7.x86_64.rpm
Source:
236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8
kernel-3.10.0-1062.9.1.el7.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos at irc.freenode.net
Twitter: @JohnnyCentOS
------------------------------
Message: 2
Date: Fri, 6 Dec 2019 23:34:45 +0000
From: Johnny Hughes <johnny at centos.org>
To: centos-announce at centos.org
Subject: [CentOS-announce] CESA-2019:4024 Important CentOS 7 SDL
Security Update
Message-ID: <20191206233445.GA5005 at bstore1.rdu2.centos.org>
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Security Advisory 2019:4024 Important
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
e3e9919525fe486bdd22e798d6ca8111312381f94fd884f2954496ec730d2ee1
SDL-1.2.15-15.el7_7.i686.rpm
85d5a427278e873245663ec50c7b43ac344bc9065b00cd4524eceb1606dde028
SDL-1.2.15-15.el7_7.x86_64.rpm
a1000d5515233e0c7df795a5ce8b8195c954944219c6e3c433e1e148565db5d7
SDL-devel-1.2.15-15.el7_7.i686.rpm
a5ceebc69680d7c13c5b37e8832e191607a4b78a76494c960299e040d5cdc596
SDL-devel-1.2.15-15.el7_7.x86_64.rpm
ec79803f3d0e7c6524813a770440c37e986189a852b182a576c5c103de1bff11
SDL-static-1.2.15-15.el7_7.i686.rpm
e4b6bd7edae68323de424e56ceabdaaa3454a29a1903632a54e1543ebab93759
SDL-static-1.2.15-15.el7_7.x86_64.rpm
Source:
7ee11ba232b1b2adc95fff9ceebd35c9ccd1153c920f6d19c1e140b9be0b8667
SDL-1.2.15-15.el7_7.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos at irc.freenode.net
Twitter: @JohnnyCentOS
------------------------------
Subject: Digest Footer
_______________________________________________
CentOS-announce mailing list
CentOS-announce at centos.org
https://lists.centos.org/mailman/listinfo/centos-announce
------------------------------
End of CentOS-announce Digest, Vol 178, Issue 2
***********************************************
I have a question to this update: Is the Kernel full open source? So i can review the kernel updates ?? I want to know the exact changes- like a merged "change paper", to show the differences clearly. Is this possible for Kernel updates? Sent with ProtonMail Secure Email. ??????? Original Message ??????? On Saturday, 7. December 2019 07:00, <centos-announce-request at centos.org> wrote:> Send CentOS-announce mailing list submissions to > centos-announce at centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.centos.org/mailman/listinfo/centos-announce > or, via email, send a message with subject or body 'help' to > centos-announce-request at centos.org > > You can reach the person managing the list at > centos-announce-owner at centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS-announce digest..." > > Today's Topics: > > 1. CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes) > 2. CESA-2019:4024 Important CentOS 7 SDL Security Update > (Johnny Hughes) > > > Message: 1 > Date: Fri, 6 Dec 2019 23:34:10 +0000 > From: Johnny Hughes johnny at centos.org > To: centos-announce at centos.org > Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix > Update > Message-ID: 20191206233410.GA4860 at bstore1.rdu2.centos.org > > Content-Type: text/plain; charset=us-ascii > > CentOS Errata and Bugfix Advisory 2019:4106 > > Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106 > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > x86_64: > 7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739 bpftool-3.10.0-1062.9.1.el7.x86_64.rpm > 68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe kernel-3.10.0-1062.9.1.el7.x86_64.rpm > dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7 kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm > e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm > 16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829 kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm > 2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99 kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm > 3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm > 63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm > 0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm > 4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146 kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm > 06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62 kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm > d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090 perf-3.10.0-1062.9.1.el7.x86_64.rpm > 8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131 python-perf-3.10.0-1062.9.1.el7.x86_64.rpm > > Source: > 236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8 kernel-3.10.0-1062.9.1.el7.src.rpm > > > ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Johnny Hughes > CentOS Project { http://www.centos.org/ } > irc: hughesjr, #centos at irc.freenode.net > Twitter: @JohnnyCentOS > > > ------------------------------------------------------------------------------------------------------------------------ > > Message: 2 > Date: Fri, 6 Dec 2019 23:34:45 +0000 > From: Johnny Hughes johnny at centos.org > To: centos-announce at centos.org > Subject: [CentOS-announce] CESA-2019:4024 Important CentOS 7 SDL > Security Update > Message-ID: 20191206233445.GA5005 at bstore1.rdu2.centos.org > > Content-Type: text/plain; charset=us-ascii > > CentOS Errata and Security Advisory 2019:4024 Important > > Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024 > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > x86_64: > e3e9919525fe486bdd22e798d6ca8111312381f94fd884f2954496ec730d2ee1 SDL-1.2.15-15.el7_7.i686.rpm > 85d5a427278e873245663ec50c7b43ac344bc9065b00cd4524eceb1606dde028 SDL-1.2.15-15.el7_7.x86_64.rpm > a1000d5515233e0c7df795a5ce8b8195c954944219c6e3c433e1e148565db5d7 SDL-devel-1.2.15-15.el7_7.i686.rpm > a5ceebc69680d7c13c5b37e8832e191607a4b78a76494c960299e040d5cdc596 SDL-devel-1.2.15-15.el7_7.x86_64.rpm > ec79803f3d0e7c6524813a770440c37e986189a852b182a576c5c103de1bff11 SDL-static-1.2.15-15.el7_7.i686.rpm > e4b6bd7edae68323de424e56ceabdaaa3454a29a1903632a54e1543ebab93759 SDL-static-1.2.15-15.el7_7.x86_64.rpm > > Source: > 7ee11ba232b1b2adc95fff9ceebd35c9ccd1153c920f6d19c1e140b9be0b8667 SDL-1.2.15-15.el7_7.src.rpm > > > -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Johnny Hughes > CentOS Project { http://www.centos.org/ } > irc: hughesjr, #centos at irc.freenode.net > Twitter: @JohnnyCentOS > > > ------------------------------------------------------------------------------------------------------------------------ > > Subject: Digest Footer > > CentOS-announce mailing list > CentOS-announce at centos.org > https://lists.centos.org/mailman/listinfo/centos-announce > > > ------------------------------------------------------------------------------------------------------------------- > > End of CentOS-announce Digest, Vol 178, Issue 2 > > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos
> On Dec 7, 2019, at 9:32 PM, joernboe via CentOS <centos at centos.org> wrote: > > I have a question to this update: > Is the Kernel full open source?Yes, the kernel is open source, the primary location is here: https://www.kernel.org/ I do not know about changes you are after, but there are proprietary chunks of software that run in kernel context: ?firmware? - binaries you have to install to use some of hardware, e.g. Intel WiFi chips. Am I right about drivers running in kernel context?> So i can review the kernel updates ??That is impressive task. If I were to do it, I would start by installing kernel source: two successive versions of kernel srpm's (foung in source rpm repository), and take a look which patches were added to new one, then inspect just these patches. Valeri> I want to know the exact changes- like a merged "change paper", to show the differences clearly. > > Is this possible for Kernel updates? > > > > > Sent with ProtonMail Secure Email. > > ??????? Original Message ??????? > On Saturday, 7. December 2019 07:00, <centos-announce-request at centos.org> wrote: > >> Send CentOS-announce mailing list submissions to >> centos-announce at centos.org >> >> To subscribe or unsubscribe via the World Wide Web, visit >> https://lists.centos.org/mailman/listinfo/centos-announce >> or, via email, send a message with subject or body 'help' to >> centos-announce-request at centos.org >> >> You can reach the person managing the list at >> centos-announce-owner at centos.org >> >> When replying, please edit your Subject line so it is more specific >> than "Re: Contents of CentOS-announce digest..." >> >> Today's Topics: >> >> 1. CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes) >> 2. CESA-2019:4024 Important CentOS 7 SDL Security Update >> (Johnny Hughes) >> >> >> Message: 1 >> Date: Fri, 6 Dec 2019 23:34:10 +0000 >> From: Johnny Hughes johnny at centos.org >> To: centos-announce at centos.org >> Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix >> Update >> Message-ID: 20191206233410.GA4860 at bstore1.rdu2.centos.org >> >> Content-Type: text/plain; charset=us-ascii >> >> CentOS Errata and Bugfix Advisory 2019:4106 >> >> Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106 >> >> The following updated files have been uploaded and are currently >> syncing to the mirrors: ( sha256sum Filename ) >> >> x86_64: >> 7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739 bpftool-3.10.0-1062.9.1.el7.x86_64.rpm >> 68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe kernel-3.10.0-1062.9.1.el7.x86_64.rpm >> dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7 kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm >> e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm >> 16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829 kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm >> 2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99 kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm >> 3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm >> 63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm >> 0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm >> 4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146 kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm >> 06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62 kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm >> d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090 perf-3.10.0-1062.9.1.el7.x86_64.rpm >> 8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131 python-perf-3.10.0-1062.9.1.el7.x86_64.rpm >> >> Source: >> 236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8 kernel-3.10.0-1062.9.1.el7.src.rpm >> >> >> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- >> >> Johnny Hughes >> CentOS Project { http://www.centos.org/ } >> irc: hughesjr, #centos at irc.freenode.net >> Twitter: @JohnnyCentOS >> >> >> ------------------------------------------------------------------------------------------------------------------------ >> >> Message: 2 >> Date: Fri, 6 Dec 2019 23:34:45 +0000 >> From: Johnny Hughes johnny at centos.org >> To: centos-announce at centos.org >> Subject: [CentOS-announce] CESA-2019:4024 Important CentOS 7 SDL >> Security Update >> Message-ID: 20191206233445.GA5005 at bstore1.rdu2.centos.org >> >> Content-Type: text/plain; charset=us-ascii >> >> CentOS Errata and Security Advisory 2019:4024 Important >> >> Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024 >> >> The following updated files have been uploaded and are currently >> syncing to the mirrors: ( sha256sum Filename ) >> >> x86_64: >> e3e9919525fe486bdd22e798d6ca8111312381f94fd884f2954496ec730d2ee1 SDL-1.2.15-15.el7_7.i686.rpm >> 85d5a427278e873245663ec50c7b43ac344bc9065b00cd4524eceb1606dde028 SDL-1.2.15-15.el7_7.x86_64.rpm >> a1000d5515233e0c7df795a5ce8b8195c954944219c6e3c433e1e148565db5d7 SDL-devel-1.2.15-15.el7_7.i686.rpm >> a5ceebc69680d7c13c5b37e8832e191607a4b78a76494c960299e040d5cdc596 SDL-devel-1.2.15-15.el7_7.x86_64.rpm >> ec79803f3d0e7c6524813a770440c37e986189a852b182a576c5c103de1bff11 SDL-static-1.2.15-15.el7_7.i686.rpm >> e4b6bd7edae68323de424e56ceabdaaa3454a29a1903632a54e1543ebab93759 SDL-static-1.2.15-15.el7_7.x86_64.rpm >> >> Source: >> 7ee11ba232b1b2adc95fff9ceebd35c9ccd1153c920f6d19c1e140b9be0b8667 SDL-1.2.15-15.el7_7.src.rpm >> >> >> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- >> >> Johnny Hughes >> CentOS Project { http://www.centos.org/ } >> irc: hughesjr, #centos at irc.freenode.net >> Twitter: @JohnnyCentOS >> >> >> ------------------------------------------------------------------------------------------------------------------------ >> >> Subject: Digest Footer >> >> CentOS-announce mailing list >> CentOS-announce at centos.org >> https://lists.centos.org/mailman/listinfo/centos-announce >> >> >> ------------------------------------------------------------------------------------------------------------------- >> >> End of CentOS-announce Digest, Vol 178, Issue 2 >> >> CentOS mailing list >> CentOS at centos.org >> https://lists.centos.org/mailman/listinfo/centos > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++
...i take care about toolkits. i remember any backdoors on non verified toolkits. I also remember tough un-secureness in serious toolkits...but whatever...thats not the point... i just want to know anything about review surgery. How are this packages verified? is there a identity check? I just want to know anything about information politics in this community :)... because its normally from red hat.
On Sun, Dec 08, 2019 at 03:32:33AM +0000, joernboe via CentOS wrote:> > I have a question to this update: > Is the Kernel full open source? > So i can review the kernel updates ?? > I want to know the exact changes- like a merged "change paper", to > show the differences clearly. > > Is this possible for Kernel updates?1.) Is the Kernel full open source? Yes. 2.) So i can review the kernel update ?? Yes. The changes CentOS makes to the kernel are described in the CentOS git repo for the kernel package: https://git.centos.org/rpms/kernel Basically, CentOS only patches the kernel to remove some Red Hat branding and to update the kernel signing information. If you want to see the individual patches that Red Hat puts into the RHEL7 and 8 kernel, you'll need to contact Red Hat, they release the kernel source fully patched with their changes. All the source is provided. -- Jonathan Billings <billings at negate.org>