Send CentOS-announce mailing list submissions to centos-announce@centos.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request@centos.org
You can reach the person managing the list at centos-announce-owner@centos.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..."
Today's Topics:
1. CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes) 2. CESA-2019:4024 Important CentOS 7 SDL Security Update (Johnny Hughes)
----------------------------------------------------------------------
Message: 1 Date: Fri, 6 Dec 2019 23:34:10 +0000 From: Johnny Hughes johnny@centos.org To: centos-announce@centos.org Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix Update Message-ID: 20191206233410.GA4860@bstore1.rdu2.centos.org Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2019:4106
Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106
The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename )
x86_64: 7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739 bpftool-3.10.0-1062.9.1.el7.x86_64.rpm 68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe kernel-3.10.0-1062.9.1.el7.x86_64.rpm dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7 kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm 16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829 kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm 2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99 kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm 3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm 63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm 0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm 4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146 kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm 06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62 kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090 perf-3.10.0-1062.9.1.el7.x86_64.rpm 8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131 python-perf-3.10.0-1062.9.1.el7.x86_64.rpm
Source: 236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8 kernel-3.10.0-1062.9.1.el7.src.rpm
I have a question to this update: Is the Kernel full open source? So i can review the kernel updates ?? I want to know the exact changes- like a merged "change paper", to show the differences clearly.
Is this possible for Kernel updates?
Sent with ProtonMail Secure Email.
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, 7. December 2019 07:00, centos-announce-request@centos.org wrote:
Send CentOS-announce mailing list submissions to centos-announce@centos.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request@centos.org
You can reach the person managing the list at centos-announce-owner@centos.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..."
Today's Topics:
- CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes)
- CESA-2019:4024 Important CentOS 7 SDL Security Update (Johnny Hughes)
Message: 1 Date: Fri, 6 Dec 2019 23:34:10 +0000 From: Johnny Hughes johnny@centos.org To: centos-announce@centos.org Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix Update Message-ID: 20191206233410.GA4860@bstore1.rdu2.centos.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2019:4106
Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106
The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename )
x86_64: 7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739 bpftool-3.10.0-1062.9.1.el7.x86_64.rpm 68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe kernel-3.10.0-1062.9.1.el7.x86_64.rpm dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7 kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm 16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829 kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm 2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99 kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm 3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm 63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm 0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm 4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146 kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm 06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62 kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090 perf-3.10.0-1062.9.1.el7.x86_64.rpm 8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131 python-perf-3.10.0-1062.9.1.el7.x86_64.rpm
Source: 236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8 kernel-3.10.0-1062.9.1.el7.src.rpm
Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos@irc.freenode.net Twitter: @JohnnyCentOS
Message: 2 Date: Fri, 6 Dec 2019 23:34:45 +0000 From: Johnny Hughes johnny@centos.org To: centos-announce@centos.org Subject: [CentOS-announce] CESA-2019:4024 Important CentOS 7 SDL Security Update Message-ID: 20191206233445.GA5005@bstore1.rdu2.centos.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Security Advisory 2019:4024 Important
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024
The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename )
x86_64: e3e9919525fe486bdd22e798d6ca8111312381f94fd884f2954496ec730d2ee1 SDL-1.2.15-15.el7_7.i686.rpm 85d5a427278e873245663ec50c7b43ac344bc9065b00cd4524eceb1606dde028 SDL-1.2.15-15.el7_7.x86_64.rpm a1000d5515233e0c7df795a5ce8b8195c954944219c6e3c433e1e148565db5d7 SDL-devel-1.2.15-15.el7_7.i686.rpm a5ceebc69680d7c13c5b37e8832e191607a4b78a76494c960299e040d5cdc596 SDL-devel-1.2.15-15.el7_7.x86_64.rpm ec79803f3d0e7c6524813a770440c37e986189a852b182a576c5c103de1bff11 SDL-static-1.2.15-15.el7_7.i686.rpm e4b6bd7edae68323de424e56ceabdaaa3454a29a1903632a54e1543ebab93759 SDL-static-1.2.15-15.el7_7.x86_64.rpm
Source: 7ee11ba232b1b2adc95fff9ceebd35c9ccd1153c920f6d19c1e140b9be0b8667 SDL-1.2.15-15.el7_7.src.rpm
Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos@irc.freenode.net Twitter: @JohnnyCentOS
Subject: Digest Footer
CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
End of CentOS-announce Digest, Vol 178, Issue 2
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
On Dec 7, 2019, at 9:32 PM, joernboe via CentOS centos@centos.org wrote:
I have a question to this update: Is the Kernel full open source?
Yes, the kernel is open source, the primary location is here:
I do not know about changes you are after, but there are proprietary chunks of software that run in kernel context: “firmware” - binaries you have to install to use some of hardware, e.g. Intel WiFi chips. Am I right about drivers running in kernel context?
So i can review the kernel updates ??
That is impressive task. If I were to do it, I would start by installing kernel source: two successive versions of kernel srpm's (foung in source rpm repository), and take a look which patches were added to new one, then inspect just these patches.
Valeri
I want to know the exact changes- like a merged "change paper", to show the differences clearly.
Is this possible for Kernel updates?
Sent with ProtonMail Secure Email.
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, 7. December 2019 07:00, centos-announce-request@centos.org wrote:
Send CentOS-announce mailing list submissions to centos-announce@centos.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request@centos.org
You can reach the person managing the list at centos-announce-owner@centos.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..."
Today's Topics:
- CEBA-2019:4106 CentOS 7 kernel BugFix Update (Johnny Hughes)
- CESA-2019:4024 Important CentOS 7 SDL Security Update (Johnny Hughes)
Message: 1 Date: Fri, 6 Dec 2019 23:34:10 +0000 From: Johnny Hughes johnny@centos.org To: centos-announce@centos.org Subject: [CentOS-announce] CEBA-2019:4106 CentOS 7 kernel BugFix Update Message-ID: 20191206233410.GA4860@bstore1.rdu2.centos.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2019:4106
Upstream details at : https://access.redhat.com/errata/RHBA-2019:4106
The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename )
x86_64: 7c0f528358d229f5d8a4943732c64c291eb4d622282a67211267f9848771e739 bpftool-3.10.0-1062.9.1.el7.x86_64.rpm 68a58326f03e21a26ad8cfa06d98a66b40d3474cb7a1322d182aa85bd82fdffe kernel-3.10.0-1062.9.1.el7.x86_64.rpm dc08e2ce45e21a16867319de8bcfe07ccd19436238e67e2a14b49113143dfca7 kernel-abi-whitelists-3.10.0-1062.9.1.el7.noarch.rpm e86ddf679897f7c58f1cd7c59deea7c811d8e2b6c2eca45b66d4d72e0a13eb1d kernel-debug-3.10.0-1062.9.1.el7.x86_64.rpm 16ecdbdf1899c9c7fc7749501289afb31ac41cb084d192a1b97704f0a7df6829 kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64.rpm 2b647e1c1b73c38452cf1b7e63ac14616950f09ff71c56a7d0ca6c1859cdfa99 kernel-devel-3.10.0-1062.9.1.el7.x86_64.rpm 3913492dccc72776bdece5a9518ad8393cf1326cb9e8a13b32dde7c2d0459d0c kernel-doc-3.10.0-1062.9.1.el7.noarch.rpm 63e2f48f7e5a96597803e65f03f057095897e7fe810cadfd3a0b7b57755c355f kernel-headers-3.10.0-1062.9.1.el7.x86_64.rpm 0ef3d34fcc37e6d8f6a3307e2480fb4beeb07a006ddd934418d02fbeeda2f8da kernel-tools-3.10.0-1062.9.1.el7.x86_64.rpm 4036170eda34550546b6af42802e317d3ecc700ad04e6475a9b3db96d5571146 kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64.rpm 06a9ce6ac6d15cf2d151044880718433100a26b800f50be65bf0b6687eea0a62 kernel-tools-libs-devel-3.10.0-1062.9.1.el7.x86_64.rpm d94bf5dab81bb51ec6378c4b3a2bd71394610204cabc060786e29b63f30ec090 perf-3.10.0-1062.9.1.el7.x86_64.rpm 8ea59b7f8659cb632658c1ae8670c39a4d3c6bc408d70ec6bb3e18736d72d131 python-perf-3.10.0-1062.9.1.el7.x86_64.rpm
Source: 236afc13e45937c5743783b535e69f38b62fb87f28aa22a91dff6da0394586d8 kernel-3.10.0-1062.9.1.el7.src.rpm
Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos@irc.freenode.net Twitter: @JohnnyCentOS
Message: 2 Date: Fri, 6 Dec 2019 23:34:45 +0000 From: Johnny Hughes johnny@centos.org To: centos-announce@centos.org Subject: [CentOS-announce] CESA-2019:4024 Important CentOS 7 SDL Security Update Message-ID: 20191206233445.GA5005@bstore1.rdu2.centos.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Security Advisory 2019:4024 Important
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024
The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename )
x86_64: e3e9919525fe486bdd22e798d6ca8111312381f94fd884f2954496ec730d2ee1 SDL-1.2.15-15.el7_7.i686.rpm 85d5a427278e873245663ec50c7b43ac344bc9065b00cd4524eceb1606dde028 SDL-1.2.15-15.el7_7.x86_64.rpm a1000d5515233e0c7df795a5ce8b8195c954944219c6e3c433e1e148565db5d7 SDL-devel-1.2.15-15.el7_7.i686.rpm a5ceebc69680d7c13c5b37e8832e191607a4b78a76494c960299e040d5cdc596 SDL-devel-1.2.15-15.el7_7.x86_64.rpm ec79803f3d0e7c6524813a770440c37e986189a852b182a576c5c103de1bff11 SDL-static-1.2.15-15.el7_7.i686.rpm e4b6bd7edae68323de424e56ceabdaaa3454a29a1903632a54e1543ebab93759 SDL-static-1.2.15-15.el7_7.x86_64.rpm
Source: 7ee11ba232b1b2adc95fff9ceebd35c9ccd1153c920f6d19c1e140b9be0b8667 SDL-1.2.15-15.el7_7.src.rpm
Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos@irc.freenode.net Twitter: @JohnnyCentOS
Subject: Digest Footer
CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
End of CentOS-announce Digest, Vol 178, Issue 2
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++
...i take care about toolkits. i remember any backdoors on non verified toolkits. I also remember tough un-secureness in serious toolkits...but whatever...thats not the point... i just want to know anything about review surgery.
How are this packages verified? is there a identity check?
I just want to know anything about information politics in this community :)... because its normally from red hat.
On Sun, Dec 08, 2019 at 03:32:33AM +0000, joernboe via CentOS wrote:
I have a question to this update: Is the Kernel full open source? So i can review the kernel updates ?? I want to know the exact changes- like a merged "change paper", to show the differences clearly.
Is this possible for Kernel updates?
1.) Is the Kernel full open source?
Yes.
2.) So i can review the kernel update ??
Yes. The changes CentOS makes to the kernel are described in the CentOS git repo for the kernel package: https://git.centos.org/rpms/kernel
Basically, CentOS only patches the kernel to remove some Red Hat branding and to update the kernel signing information.
If you want to see the individual patches that Red Hat puts into the RHEL7 and 8 kernel, you'll need to contact Red Hat, they release the kernel source fully patched with their changes.
All the source is provided.