-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  Slackware 14.0 kernel (SSA:2017-184-01)

New kernel packages are available for Slackware 14.0 to fix security issues.


Here are the details from the Slackware 14.0 ChangeLog:
+--------------------------+
patches/packages/linux-3.2.90/*:  Upgraded.
  This kernel fixes security issues (including "Stack Clash"). The issues
  may result in denial-of-service conditions or may allow attackers to
  execute arbitrary code with elevated privileges.
  Be sure to upgrade your initrd after upgrading the kernel packages.
  If you use lilo to boot your machine, be sure lilo.conf points to the correct
  kernel and initrd and run lilo as root to update the bootloader.
  For more information, see:
    https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000364
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7482
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-generic-3.2.90-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-generic-smp-3.2.90_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-headers-3.2.90_smp-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-huge-3.2.90-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-huge-smp-3.2.90_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-modules-3.2.90-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-modules-smp-3.2.90_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/linux-3.2.90/kernel-source-3.2.90_smp-noarch-1.txz

Updated packages for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.90/kernel-generic-3.2.90-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.90/kernel-headers-3.2.90-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.90/kernel-huge-3.2.90-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.90/kernel-modules-3.2.90-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/linux-3.2.90/kernel-source-3.2.90-noarch-1.txz


MD5 signatures:
+-------------+

Slackware 14.0 packages:
70df9be1b86779b3cc8cb52153bcfa84  kernel-generic-3.2.90-i586-1.txz
490eca2bc1b902928db2ea27034875c5  kernel-generic-smp-3.2.90_smp-i686-1.txz
2e3abf6947d3ee498479a5c537f146a8  kernel-headers-3.2.90_smp-x86-1.txz
3772fb2dcd8bde3e7aefdccc52786db9  kernel-huge-3.2.90-i586-1.txz
e9822b8634ce67b45e966ab6c921441c  kernel-huge-smp-3.2.90_smp-i686-1.txz
86ff0c0eb55130e78ed930f0c047c815  kernel-modules-3.2.90-i586-1.txz
30a1a39bd010ef4ca7dcb0677f03c96c  kernel-modules-smp-3.2.90_smp-i686-1.txz
a0ff0db6d253eb638583bea6f8e767eb  kernel-source-3.2.90_smp-noarch-1.txz

Slackware x86_64 14.0 packages:
40a114d1e988d8f1e17f7a8093ac05d0  kernel-generic-3.2.90-x86_64-1.txz
6996ae73c43375b42c0d88c8af82a57e  kernel-headers-3.2.90-x86-1.txz
62bc6f0a5d15baac4e980669e31dd938  kernel-huge-3.2.90-x86_64-1.txz
5ef252a764f9f0bec37cc3dea0e1baa8  kernel-modules-3.2.90-x86_64-1.txz
24fb56c90034af5718ee46adb8bff8ff  kernel-source-3.2.90-noarch-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg kernel-*.txz

If you are using an initrd, you'll need to rebuild it.

For a 32-bit SMP machine, use this command (substitute the appropriate
kernel version if you are not running Slackware 14.2):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 3.2.90-smp | bash

For a 64-bit machine, or a 32-bit uniprocessor machine, use this command
(substitute the appropriate kernel version if you are not running
Slackware 14.2):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 3.2.90 | bash

Please note that "uniprocessor" has to do with the kernel you are running,
not with the CPU.  Most systems should run the SMP kernel (if they can)
regardless of the number of cores the CPU has.  If you aren't sure which
kernel you are running, run "uname -a".  If you see SMP there, you are
running the SMP kernel and should use the 3.2.90-smp version when running
mkinitrd_command_generator.  Note that this is only for 32-bit -- 64-bit
systems should always use 3.2.90 as the version.

If you are using lilo to boot the machine, you'll need to ensure that the
machine is properly prepared before rebooting. Be sure that the image= line
references the correct kernel file and then run "lilo" as root to reinstall
the boot loader.


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAllayvQACgkQakRjwEAQIjOhnQCfbqFZM3mdWpsyVKgxBCtVO6sS
xS8AnAyAmT3TONyhb2qgX3EUYB+wP/8K
=U/jH
-----END PGP SIGNATURE-----