Re: kernel security bug #307900

2005-06-13 Thread Holger Levsen
Hi, On Friday 10 June 2005 04:02, Adam Majer wrote: > > > woody's kernels are vulnerable to CAN-2004-1235, a uselib() race > > condition. > > Will this be fixed for Woody? > > I thought the plan was to provide security support for Woody for > > another year? > AFAIK, there is no security support f

Re: kernel security bug #307900

2005-06-10 Thread Adam Majer
Olaf van der Spek wrote: > Adam Majer wrote: > >> AFAIK, there is no security support for Woody kernels for some time now. >> Use kernel.org and compile your kernels for security sensitive machines. > > > What's the reason for this lack of support? > > I think after Herbert Xu left so did security

Re: kernel security bug #307900

2005-06-10 Thread Olaf van der Spek
Adam Majer wrote: Olaf van der Spek wrote: woody's kernels are vulnerable to CAN-2004-1235, a uselib() race condition. Will this be fixed for Woody? I thought the plan was to provide security support for Woody for another year? AFAIK, there is no security support for Woody kernels for s

Re: kernel security bug #307900

2005-06-09 Thread Adam Majer
Olaf van der Spek wrote: > > woody's kernels are vulnerable to CAN-2004-1235, a uselib() race > condition. > > Will this be fixed for Woody? > I thought the plan was to provide security support for Woody for > another year? AFAIK, there is no security support for Woody kernels for some time now.

Re: Re: kernel security bug #307900

2005-06-09 Thread Olaf van der Spek
> woody's kernels are vulnerable to CAN-2004-1235, a uselib() race condition. Will this be fixed for Woody? I thought the plan was to provide security support for Woody for another year? -- Olaf van der Spek http://xccu.sf.net/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "

Re: kernel security bug #307900

2005-06-05 Thread Steve Langasek
On Mon, Jun 06, 2005 at 08:28:17AM +1000, Brian May wrote: > > "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: > Steve> kernel-image packages built against 2.6.8-16 are available > Steve> in sarge for the past week or so for i386, alpha, and ia64. > [...] > Steve> In light

Re: kernel security bug #307900

2005-06-05 Thread Brian May
> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: Steve> kernel-image packages built against 2.6.8-16 are available Steve> in sarge for the past week or so for i386, alpha, and ia64. [...] Steve> In light of the announcement at the beginning of May that Steve> sarge is

Re: kernel security bug #307900

2005-06-05 Thread Steve Langasek
On Sun, Jun 05, 2005 at 12:22:07PM +1000, Brian May wrote: > Whats the deal with bug #307900? > As far as I can tell from reading the bug report, the bug has not been > fixed in sarge, will not be fixed for the release, but the bug has > been closed. kernel-source-2.6.8 2.6.8-15 has been in testi

Re: kernel security bug #307900

2005-06-05 Thread Hamish Moffatt
On Sun, Jun 05, 2005 at 12:22:07PM +1000, Brian May wrote: > As far as I can tell from reading the bug report, the bug has not been > fixed in sarge, will not be fixed for the release, but the bug has > been closed. > > Have we come to the point where making a release is more important > then fixi

kernel security bug #307900

2005-06-04 Thread Brian May
Hello, Whats the deal with bug #307900? As far as I can tell from reading the bug report, the bug has not been fixed in sarge, will not be fixed for the release, but the bug has been closed. Have we come to the point where making a release is more important then fixing known security bugs? Does