Bug 38320 - Possible package epoch and security sheets mismatch
Summary: Possible package epoch and security sheets mismatch
Status: CLOSED FIXED
Alias: None
Product: Branch p8
Classification: Distributions
Component: kernel-image-std-def (show other bugs)
Version: не указана
Hardware: x86_64 Linux
: P5 normal
Assignee: Andrey Cherepanov
QA Contact: qa-p8@altlinux.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-04-03 09:28 MSK by Petr
Modified: 2020-04-20 09:48 MSK (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Petr 2020-04-03 09:28:17 MSK 
Hello!
You have security patches described here https://cve.basealt.ru/
In the following patches
01.03.2019 / kernel-image-std-def-2:4.4.172-alt0.M80C.1
07.08.2019 / kernel-image-std-def до 2:4.4.188-alt0.M80C.1
20.06.2019 / kernel-image-std-def до 2:4.4.181-alt0.M80C.1
15.08.2019 / kernel-image-std-def до 2:4.4.189-alt0.M80C.1
you have the 2nd epoch of the kernel required, but the latest updates for p8 have the following version
kernel-image-std-def|1|4.9.217|alt0.M80P.1|x86_64|

You probably have a problem with either the page or the package version.

# uname -a
Linux host-170.localdomain 4.9.217-std-def-alt0.M80P.1 #1 SMP Sat Mar 21 13:33:57 UTC 2020 x86_64 GNU/Linux

# cat /etc/altlinux-release
ALT 8 SP Server

# date
Fri Apr  3 16:15:48 MSK 2020
Comment 1 Andrey Cherepanov 2020-04-03 13:23:57 MSK 
Please, update from c8.1 branch.
Comment 2 Andrey Cherepanov 2020-04-03 13:25:11 MSK 
And use un-def kernel: update-kernel -t un-def
Comment 3 Petr 2020-04-20 09:34:29 MSK 
(In reply to Andrey Cherepanov from comment #1)
> Please, update from c8.1 branch.

How can I do this? You have instructions for c8, but there is the same kernel.
Comment 4 Andrey Cherepanov 2020-04-20 09:48:09 MSK 
(Ответ для Petr на комментарий #3)
> (In reply to Andrey Cherepanov from comment #1)
> > Please, update from c8.1 branch.
> 
> How can I do this? You have instructions for c8, but there is the same
> kernel.

As root:
update-kernel -t un-def

Because updated images use kernel-image-un-def-4.19.78 as main kernel. Kernel std-def is deprecated and is available only for legacy software. Do not use it.