F24-2016117 Updated Lives Available Now!

It is with great pleasure to announce that the Community run respin team has yet another Updated ISO round.  This round carries the 4.8.7.200 kernel along with over 780 MB of updates (avg,  some Desktop Environments more, some less) since the Gold release back in June.

Torrents will be available at the same link as usual alongside the .iso files.

Below are the contents of Both CHECKSUM512-20161117 and HASHSUM512-20161117 (the later is torrent hashes):

cat CHECKSUM512-20161117

(Clearsigned with 0x418E43BCA33F2A72)

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

9e0784d2b89a8efd4a4250511625d44310c0b28982d36b14be837611925f0726c8ce94b365d04b23af31d380e190302b952d081fe4ea42dd3380aca918af4004 F24-source-20161117.iso
d35bf39a0a7c623e26a8b0698441bcec9a363fecf8800049451ad4eb6271b23523774479d9047b1be3158b6a4b5c051a27fcaa8c18a55a5946ce8e6f5e6288f8 F24-x86_64-CINN-20161117.iso
8d8aa038130381789855a2c8054dbd5b95373cc15e449165216c2eb6938a627bd0b26005f0a6baafb7b1b3325a9717c34a17ef262cf3fe3da091e7f186bbec9e F24-x86_64-KDE-20161117.iso
d0e131e0397e9837260ddd9757301db1e270fbacdbda86a1ffeccb8dea0e30cc98ad20a44d2f0d50f11db2fda19aa7170e336f607dd12aeb4d384ea16259c718 F24-x86_64-LXDE-20161117.iso
80ea5a56c3a051bcc61ba085a6a0327055acb2c6914f9739aca7d87d8b956b046db660a16d3d7e4deb727984e6ffd7d8e077514d581262855bf3f8c2d321a28e F24-x86_64-MATE-20161117.iso
2318c6c754cddb2efde78e1640843866fbdfada16109adddbbbf2b670b6864e6a9d980b6b781d345abd0bac1174f74a62580ea293e2749faacd4fe71b8c3b12a F24-x86_64-WORK-20161117.iso
c24b4616c3cd0f73b18cb222808c2b5dcdb9c2fd19c475bcaf6115786373ae0955e45296e245aeef50d3c80d937ad4902d9e15abd61d92aa2ffacb84617672a9 F24-x86_64-XFCE-20161117.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iF4EARYIAAYFAlguNScACgkQVcTldQ4br25NkwEAji/MjVI3wjDvEPSpM0taAiev
uR2aZHAAnyiXqWc4tlQBALkn3TRRmw4KznEN2XA0+DBKhgwd6JfArnhoKWQv8r4P
=Iq9U
—–END PGP SIGNATURE—–

cat HASHSUM512-20161117

(Clearsigned with 0x418E43BCA33F2A72)

 

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

9c00febb5cc76d987888fefa4c3ce6f25b87471b – F24-x86_64-WORK-20161117.iso
b23e66dfcf19b776c6583dc817fd8b3f26278aeb – F24-x86_64-KDE-20161117.iso
0d419161c5f4cfd6319113941d9e2e4432518d8f – F24-x86_64-LXDE-20161117.iso
491b35cb520307d54b71baa185aafac7304033df – F24-x86_64-XFCE-20161117.iso
2ef20f59588a3a4e0d4f9722d7d93d654570b918 – F24-x86_64-MATE-20161117.iso
1d462df0d7b38f0d3995479c3e5e13718dbcce23 – F24-x86_64-CINN-20161117.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iF4EARYIAAYFAlguNUUACgkQVcTldQ4br259+AEApLXojxvj7juYelwFP4zJYx0g
//hB5JdWBAiNhJLgn+cA/3GOwI29/d4qqUOmwv8dmbAtpOAipFTnRcwHRYiNiD0I
=WjfY
—–END PGP SIGNATURE—–

Election Respins!! 20161108 Updates Now Available (with 4.8.6.200)

So this election is over (for us USA folks).  And you may wanna reboot your life, well can’t help there but however if you want to reboot your box with a new shiny  version of Fedora 24 or have a spare updated copy on hand to show off to friends or at events,;  you’re in luck.

Thanks to the community respins team there are a new set this time complete with a MultiBoot ISO ( which has all 6 64 bit ISOs on one ‘demo’  image.  Caveat on the MultiBoot it is 9.7Gb in size so a 16gb not the usual 2gb USB will be required.

 

All of them are as usual available here

As has become normal here the contents of HASHSUM512 and CHECKSUM512 files are:

 

cat CHECKSUM512-20161108
—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

5dd169abbb7c3727d6e8e49797aab5cb37ad9dcd311e9b1970a0e5dd815c8cdea335e7bfcb0296d3e5effbe45da49884382174891180d7b95bbda2b0f4db7090 F24-source-20161108.iso
b9330896a940b79b015df6e3cf4832b11944fda0d46395026347c8fc1d61d6ef68805434823bba983fa931520d0ccbe9cd1ca8d0d1a75588a53f95be3008f069 F24-x86_64-CINN-20161108.iso
b809bc47d45841406e15a1f51d40e61b3178cd20f2f6e3205ef63bd2096d9c10c4b59cc243dab19f255489a45f6910f063dbc0b11af94ccdba932f4e65d967d1 F24-x86_64-KDE-20161108.iso
4c2465250d411c91b706e0a621832506da52e36a117c8c9d684aac6f7863ad345f87b887479aa00eb64c5b5a5123c545b704eb6a5b2bcc9a9a627ee7df4ea4b5 F24-x86_64-LXDE-20161108.iso
8cebfd052440db3c0902424769a2ab1eca3386f17d10af39eb0ea29cd46e9aa9a77bfcbd42385662f3951456a137501667fb01c53c1293f4d2537c425eed5195 F24-x86_64-MATE-20161108.iso
73b7e2c6c3fe92fe1625a7188477ba0e2f6a8c5e75394507ebd21b8c478ee7d61e83a4db3f3f393caad9363d1f181689d5972315f3241b4dbac0eb5a4bb8639c F24-x86_64-WORK-20161108.iso
abb92b6bcf5ec7bc12044a476b413d816545787edf22b5dd39d6455ed1ff47fe6d82848d4fc7f308415c6403801c0f9e4c6c2ac93ecc31e36265994f0c32c685 F24-x86_64-XFCE-20161108.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iH0EARYIACUFAlgiLfceHGxpbnV4bW9kZGVyQGZlZG9yYXByb2plY3Qub3JnAAoJ
EFXE5XUOG69uXUwA/AskC4DoPqgQ8eIgy/15+bS7zHw8ILZwqAhEBILHUmXeAPwO
Zdp0/sRNwfSfKJy6gW/Wg12P6c+t+tZFnxXD5NiOAw==
=sY5o
—–END PGP SIGNATURE—–

 

cat HASHSUM512-20161108
—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

ff708438dcbc044fc1f199fd5e75db2cca8cc6ae – F24-x86_64-WORK-20161108.iso
20673d8509a15cb016d8cc82bcb86e594b905832 – F24-x86_64-KDE-20161108.iso
146543dbd0f581f5ea6894a72d4d9b3407fd27fa – F24-x86_64-LXDE-20161108.iso
e157711a8acd8f394a2417a9205e097eb80e1184 – F24-x86_64-XFCE-20161108.iso
99ea075a3c035367705525f80ddef6277844c2cd – F24-x86_64-MATE-20161108.iso
5be1c0e3327da85f819ebd7822a40253142a8a9a – F24-x86_64-CINN-20161108.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iH0EARYIACUFAlgiLbUeHGxpbnV4bW9kZGVyQGZlZG9yYXByb2plY3Qub3JnAAoJ
EFXE5XUOG69u/lUBAPlmFthGzC/D8jor8K9gwB+zJiiCaJWjA7S5LsRam/qwAQCA
Q2KM5PkfV4clGYgcgEdfcbzq/Mk6YZq9IJtDsB03DQ==
=p5FU
—–END PGP SIGNATURE—–

The Multi has a CHECKSUM512 as well on this round, however there is NO torrent of it.

cat CHECKSUM-Multi-20161108
—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

b99b8bd45ee54b84f23e657662dd728060bf89725a65b258c1417d1d8186413f2b2813153a49f08ab42ba43e6bb73c8db9122896ce079022b5368542dd84984f F24-Multiboot-20161108.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iF4EARYIAAYFAlgk70kACgkQVcTldQ4br26xXAD/SjZ873AG8Ie/7fXwqbUh+oEt
+8iL5bYOM6xIOBMwcxEBANgPuD1S5K73kgLN+Zatg1HO8xtLGpLYFpdKRhbPxYoP
=7CxA
—–END PGP SIGNATURE—–

Halloween Respins – F24-20161031 Available NOW!

It is with great pleasure to announce that the Community run respin team has yet another Updated ISO round.  This round carries the 4.8.4-200 kernel along with over 800 MB of updates (avg,  some Desktop Environments more, some less) since the Gold release back in June.

Torrents will be available at the same link as usual alongside the .iso files.

Below are the contents of Both CHECKSUM512-20161009 and HASHSUM512-20161009 (the later is torrent hashes):

cat CHECKSUM512-20161015

(Clearsigned with 0x418E43BCA33F2A72)

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

097865c98d5f9f57ee7ad3fada949ac8b157edd630583469edd907ce462bbe35acf12ca12bbfc25c267b9408039f0543281ac8f9f9e282bfe7df9641062b9a39 F24-source-20161031.iso
2166affc2ff4deaa0bec43886a237c5b7f48c84d99aa9d9cd489570a37a196e04b922705805849f939bf7a42fd66fa02ac3e0999f551c7a8447e8a441e0bd232 F24-x86_64-CINN-20161031.iso
e22749beb1551ffcaf4c783f8f80ddca75b7a598a64ba871ff7b05606291a04140be3e1f7cf38eaad04d1d9472b6cbc5ae4625e149c36a2b896f4417fd9c6806 F24-x86_64-KDE-20161031.iso
52b40fb102937c4ec26fc023ae4c35017d63b0fb020af7ebac23b709c8e377563539fc28cf88695a26578c03c03c9fc3a35b99a6dfc41e9d8a1242080f00bea4 F24-x86_64-LXDE-20161031.iso
940da45b86f0eae4dfdcc3aae8996b3f362b4c6cfa2bd64f738c443fb2d5e44402ed2ce525f1b5c40b0c9a0fc15d38fa8abccf1769a283a4668fd82471a9a642 F24-x86_64-MATE-20161031.iso
e8f17566749c479f85daa853ae1b90023344bbc73175685e3a3b5aa30b3da834337724ee5368441e9c8d0d309840f110abaf30ae5c47958e85c412f30aee4e7b F24-x86_64-WORK-20161031.iso
782bdc335d26ac37ee98873a121494c69599e711f13a21c512155067117c4c4185a3e75d98226f23245adf8aeafac36a995776ffbb43b24bb86d675674f44064 F24-x86_64-XFCE-20161031.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iF4EARYIAAYFAlgXyFwACgkQVcTldQ4br27U8QEA/IuJ0GO9nlBjPu/IEW9chu+v
NlsxETRymMTHEx/2SYoBAPfWDenvJHsXzxgHJ2rplnVZMFgqZKyDdnjz9vhj6fgE
=9FhV
—–END PGP SIGNATURE—–

cat HASHSUM512-20161015

(Clearsigned with 0x418E43BCA33F2A72)

 

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

63f89913c4d6e624ae3c597db04f550b7c439062 – F24-x86_64-CINN-20161031.iso
32940a5c6fc8fb9ef0834c0f6e94031d608ff6de – F24-x86_64-WORK-20161031.iso
f480c0d871b3caffe5442e949a2f0da9de6aba0c – F24-x86_64-KDE-20161031.iso
feceb406b513e912fda319de4f0eb0806f47a9fd – F24-x86_64-XFCE-20161031.iso
90c2e7169047a2d82b672b5fd958380ec2178be3 – F24-x86_64-LXDE-20161031.iso
dd8552d9acde541ae352ca9e80ddbd1afcc69b28 – F24-x86_64-MATE-20161031.iso
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iF4EARYIAAYFAlgXyEYACgkQVcTldQ4br27aGgD9HUoY7F41zxtibZyYzFxt7Eim
IR1TsmqCJruJNx97t5IBAIUSfMgFEVLbf0dpeNrJoM+h9FNRF7Fe1navV5t2YScD
=c951
—–END PGP SIGNATURE—–

Dirty Cow: Privilege Escalation Exploit, Linux Kernel

Okay so likely have heard about this, if you like me use Linux daily, in your college, professional or hobbyist life but like what the heck is it really?

To paraphrase from the initial disclosure docs:

the privilege-escalation vulnerability potentially allows any installed application, or malicious code smuggled onto a box, to gain root-level access and completely hijack the device.

The programming bug gets its name from the copy-on-write mechanism in the Linux kernel; the implementation is so broken, programs can set up a race condition to tamper with what should be a read-only root-owned executable mapped into memory

So exactly what does all that mean?  It means your web facing servers and even Androids have a big time issue with multi tasking in a sense.  This bug allows for what is called a ‘race condition’  which as you may have guessed makes for a first one in wins scenario.  The bad part is that that allows the kernel to be tricked into mapping a new ‘page’  (a coding term for the memory allocation) without fully un-allocating or ‘unlocking’  the previous one. This in turn allows for a bad memory page to get into a root-owned (the almighty full system admin) which is bad news.  The process that is overwritten or bypassed is called Copy-On-Write  (hence the COW part of the name) and being that the race condition is executed by using and triggering dirty paging within or  in an effort to gain privileged access its been Dubbed Dirty CoW.  If you feel so inclined to read the much more technical details feel free to read up on CVE 2016-5195

F24 Updated ISOs available. (Kernel with Dirty Cow Patched)

It is with great pleasure to announce that the Community run respin team has yet another Updated ISO round.  This round carries the 4.7.9-200 kernel along with over 800 MB of updates (avg,  some Desktop Environments more, some less) since the Gold release back in June.

Torrents will be available at the same link as usual alongside the .iso files.

You have heard about this nasty privilege escalation bug called ‘Dirty Cow’ , well rest assured the infected farm and farmer have been found and the vaccine has been applied to the kernel in these updates. More info on ‘Dirty Cow’  on my blog post on it here.

Below are the contents of Both CHECKSUM512-20161023 and HASHSUM512-20161023 (the later is torrent hashes):

cat CHECKSUM512-20161023

(Clearsigned with 0xF59276298D2264944)

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA1

8d1c8b9637b1ccc16233ae740e6e0137485574a6f02ab05e66e5a6fb8d5c18a6671395e14341e2cb45f902cd20a4ef987bd83265b68932b8c2183ff2b5194e5e F24-source-20161023.iso
aee5e894dc6b34e207aaa0f23f7a4fd6d16577846d5f7ab3568a234f9e0b2bea1ae814a2291852cb2dbba3930b046ce31cffbcadaf5bff72208a36176eabbecd F24-x86_64-CINN-20161023.iso
6875a43e59a899e4520260e19fb28bb7ade59565b46fc6ad4f22ca8da01c57822ca7ed9373f795377dfaf750d28b6df6c1c083da5d5a0628f8d26553fb744ea0 F24-x86_64-KDE-20161023.iso
197ea70be8337f97f60e2558188e82f53eae0208d3166a7356267dc515e0b7c6204e4b5aae1ae4b44150ff59881a7c2b3d8c998e9dd715872d8c2fe1fe0485c3 F24-x86_64-LXDE-20161023.iso
7f4b48998cb716042a899089f1b292aa77ce5fca44c8d69ceb25f8769da5d9bbe2b29cef728630ae643ad4fc290c64adf270debb228454e620509f039294849c F24-x86_64-MATE-20161023.iso
ffb77a60e5895d4521c58efcbb41bb6afcca7a9a2b3320929cecb9422d00caa1cb7e5f23b04bae9644bf6ea0dae1ab2c9674f4f7ba243acd6250fd5e90221c1d F24-x86_64-WORK-20161023.iso
4ba2915a0ba51b870e7a51eb8d658464bac99f6d998f9f06c26ab8642fedd0212c2ab47c256c7fb5be060494dd6c8eb3279a0d84ca8516db199e45e612d2e502 F24-x86_64-XFCE-20161023.iso
—–BEGIN PGP SIGNATURE—–
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=+BTN
—–END PGP SIGNATURE—–

cat HASHSUM512-20161023

(Clearsigned with 0xF59276298D2264944)

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

c45662c568ecb116fd18e8f2fae4dedb43a17bdd F24-x86_64-CINN-20161023.iso
379d63a42b3e218cc0aefebc176eabe4c508c622 F24-x86_64-KDE-20161023.iso
89cd48b48d4b1163ac0b81fa639b40ae11fc36ae F24-x86_64-LXDE-20161023.iso
9dfb8df60faa611178d430d897ea365f3df4bd00 F24-x86_64-MATE-20161023.iso
240f78a935d54ef5c92491ee14334b14ad4d5951 F24-x86_64-WORK-20161023.iso
4af163e1162642e8d2a2632878106b94c58ac22a F24-x86_64-XFCE-20161023.iso
—–BEGIN PGP SIGNATURE—–

iQIVAwUBWA4cRlknYpjSJklEAQIbKw//U9SbHay3ma/wo1fz1atkVmabYqsAHUZP
NA4iF1iJuFIfgkDIxlnoF8cAHAnxymp13oeA5jd5Mrx8m3TsLkFlv8XRG9tSjyXp
zGtrkxCrqSMNlE71FrU7iicAhOhDa0MvX14o76Zvn03oLfeWCI+Rjl2XTHDwnxPf
vcKKrRR7QSOfD8LjbzaIm1HmnRD83uU2ZEWixdrFwcf0Ris1iiaXffnWLyi11Y0M
TYtu2UWSot/FNsa0tprqh/w0Pb1EOJz6xCjOHbUAlZg0K2WzQd8k+be3AzIaZRUs
r8HmN6xW8RqUnoojk0sbeA3uMAg6UkECbhmI//RLw89g24WBfOGE2bJpBCRIHmZp
aXohVaR9vOpUvjcovg8Ux1UzI01u8C9ncXoAfSLpouaE3iecafNswkGC5NzTKUE+
T6ipz8ORJ14dgnXW0piztf1+tg3uy+P86qcLj2cAX1UKsYPCR6/oUlAt3iO0BPbA
KJxwTNzITIZIA0V83qGQyyiPYH9vv4oP9D/bZjomOpyGchI0BlpA+ldQYXIXtXFv
o697JA8gBzYIjjdqgKZn6srRjHoWDMyLv9qKFShjtadnaKcc2zU1Z3+JA9Bshuhu
LB0ER9kVDhrAblZZZ2GqXhUvSVvZYv86qt6Jg1x/HouLHD0AaOT8oJ/9sdbJyZZl
l5Lt7JcoMH8=
=Vk0T
—–END PGP SIGNATURE—–