SCIENTIFIC-LINUX-USERS Archives

December 2018

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Gilles Detillieux <[log in to unmask]>
Reply To:
Gilles Detillieux <[log in to unmask]>
Date:
Mon, 3 Dec 2018 11:29:46 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (36 lines)
Thanks for the feedback, Andreas. That saves me some testing time. It 

looks like the security bug 

(https://urldefense.proofpoint.com/v2/url?u=https-3A__access.redhat.com_security_cve_cve-2D2018-2D14665&d=DwIDbA&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=VStRhNQ03emrmYLjFAIDre-xzZT0Ho_w1biFWTQSbtc&s=pGQ8kJ1ceFEdtE90n9wkzNyf0BcBKbllIvhnPdeLWjc&e=) needs physical 

access to the console to exploit. Fortunately that shouldn't be a 

problem in our environment, where the users are more interested in 

hacking neurons.



I noticed in the Errata message for the xorg-x11-server update, it says 

"The SL Team added a fix for upstream bug 1650634". I'm wondering if 

this bug fix (https://urldefense.proofpoint.com/v2/url?u=https-3A__bugzilla.redhat.com_show-5Fbug.cgi-3Fid-3D1650634&d=DwIDbA&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=VStRhNQ03emrmYLjFAIDre-xzZT0Ho_w1biFWTQSbtc&s=vz7Ui2PF_YcxXFRgPhPceXRL1HuDpy8255vaqI-vmbE&e=) broke 

things for the Radeon drivers. Seems a more likely cause than the CVE 

fix for an argument handling issue. That fix was to support the SL 7.6 

upgrade on nVidia hardware. I'll have to see if the 7.6 upgrade (now 

available) makes the problem go away for the radeon 3000. If not, I'll 

likely downgrade Xorg to 1.19 on our systems till I hear of a fix for this.



Thanks again,

Gilles



On 2018-12-03 10:52, Andreas Nowack wrote:

> I would exclude the kernel as source of the problem since downgrade to 

> Xorg 1.19 removes all the error messages and problems. (But due to 

> security bugs, Xorg 1.19 is not a real option).

>

> Best regards,

>   Andreas

>

>



-- 

Gilles R. Detillieux              E-mail: <[log in to unmask]>

Spinal Cord Research Centre       WWW:    https://urldefense.proofpoint.com/v2/url?u=http-3A__www.scrc.umanitoba.ca_&d=DwIDbA&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=VStRhNQ03emrmYLjFAIDre-xzZT0Ho_w1biFWTQSbtc&s=prJli2p7XOAkM6jQUZt5sT2v8cvZTjVke8yhwX6Dnc4&e=

Dept. of Physiology and Pathophysiology, Faculty of Health Sciences,

Univ. of Manitoba  Winnipeg, MB  R3E 0J9  (Canada)




ATOM RSS1 RSS2