The main changes for this week are a couple of important security updates, one for openssl on SL7 and one for the kernel on Ubuntu. Here are the full details…

openssl on SL7

In the previous release the openssl package version on SL7 was pinned to 1.0.2k-22.el7_9 to resolve an issue with a broken update – httpd fails to start with double free after updating to openssl-1.0.2k-23.el7_9 (BZ#2039993). Version 1.0.2k-24.el7_9 has since been released so the version override has been removed.

Ubuntu Kernel

The INF kernel for Ubuntu has been updated to 5.4.0-96.109. That fixes a high priority issue, for full details see the Ubuntu security notices – CVE-2022-0185, USN-5240-1.

KVM KSM

The ksmtuned package for “Kernel Same-page Merging” has been added to the lcfg/options/ksm.h header for Ubuntu KVM servers.

alpine mail client

Enthusiasts of the alpine mail client can test the latest version – 2.25.1 – on DICE Ubuntu by specifying the DICE_OPTIONS_ALPINE_PREVIEW packages macro (i.e. add it to the profile.pkgcppopts resource).

DICE BMC DHCP Configuration

Following on the from the recent dhcp/dhclient changes to add support for specifying the domainname and bmcdomainname resources, there are 3 new site-specific macros which may be used to simplify the DHCP configuration for the BMC on DICE servers – DICE_BMC_AT, DICE_BMC_IF, DICE_BMC_KB. The macro takes a single argument which is the MAC address of the BMC. This is the equivalent of doing something like:

dhclient.bmcmac         BMC_MAC
dhclient.bmchostname    <%profile.node%>
dhclient.bmcdomainname  bmc.inf.ed.ac.uk
!dhclient.cluster       mADD(dhcp/if/consoles)

Weekly Changes – 24/01/2022 / LCFG Project by blogadmin is licensed under a Creative Commons Attribution CC BY 3.0