[Dovecot] v2.0.13 problems after kernel patch for CVE-2011-1083 applied on Centos 5

[Doug Henderson]

On Feb 26, 2012, at 2:44 AM, Morten Stevens wrote:

> On 26.02.2012 03:55, Doug Henderson wrote:
>> On Feb 25, 2012, at 3:15 AM, Morten Stevens wrote:
>>> 
>>> Try it without ksplice. (yum update and reboot)
>> 
>> I don't know if I'll be permitted to do that in a production
>> environment - possibly a test one.
>> I'll need to get some opinions from our Ops people as to if/how they
>> might want to go about it.
>> 
>>> Which kernel is running exactly?
>> 
>> 2.6.18-274.3.1.el5
> 
> That is probably the problem. The current RHEL 5.8 kernel is 2.6.18-308.el5. There are many changes between 2.6.18-274 (EL 5.7) and 2.6.18-308 (EL 5.8). So I do not know if it is a good idea to apply ksplice patches between minor 5.x releases.
> 
> Best regards,
> 
> Morten

Thanks Morten,
We'll install the latest kernel on a test machine tomorrow and see how things go - we'll probably also attempt to reinstall the patch (if appropriate) and see if it still breaks things.

Doug