Bug 38320

Summary:	Possible package epoch and security sheets mismatch
Product:	Branch p8	Reporter:	Petr <pperminov>
Component:	kernel-image-std-def	Assignee:	Andrey Cherepanov <cas>
Status:	CLOSED FIXED	QA Contact:	qa-p8 <qa-p8>
Severity:	normal
Priority:	P5
Version:	не указана
Hardware:	x86_64
OS:	Linux

Description Petr 2020-04-03 09:28:17 MSK

Hello!
You have security patches described here https://cve.basealt.ru/
In the following patches
01.03.2019 / kernel-image-std-def-2:4.4.172-alt0.M80C.1
07.08.2019 / kernel-image-std-def до 2:4.4.188-alt0.M80C.1
20.06.2019 / kernel-image-std-def до 2:4.4.181-alt0.M80C.1
15.08.2019 / kernel-image-std-def до 2:4.4.189-alt0.M80C.1
you have the 2nd epoch of the kernel required, but the latest updates for p8 have the following version
kernel-image-std-def|1|4.9.217|alt0.M80P.1|x86_64|

You probably have a problem with either the page or the package version.

# uname -a
Linux host-170.localdomain 4.9.217-std-def-alt0.M80P.1 #1 SMP Sat Mar 21 13:33:57 UTC 2020 x86_64 GNU/Linux

# cat /etc/altlinux-release
ALT 8 SP Server

# date
Fri Apr  3 16:15:48 MSK 2020

Comment 1 Andrey Cherepanov 2020-04-03 13:23:57 MSK

Please, update from c8.1 branch.

Comment 2 Andrey Cherepanov 2020-04-03 13:25:11 MSK

And use un-def kernel: update-kernel -t un-def

Comment 3 Petr 2020-04-20 09:34:29 MSK

(In reply to Andrey Cherepanov from comment #1)
> Please, update from c8.1 branch.

How can I do this? You have instructions for c8, but there is the same kernel.

Comment 4 Andrey Cherepanov 2020-04-20 09:48:09 MSK

(Ответ для Petr на комментарий #3)
> (In reply to Andrey Cherepanov from comment #1)
> > Please, update from c8.1 branch.
> 
> How can I do this? You have instructions for c8, but there is the same
> kernel.

As root:
update-kernel -t un-def

Because updated images use kernel-image-un-def-4.19.78 as main kernel. Kernel std-def is deprecated and is available only for legacy software. Do not use it.