Re: kernel security bug #307900

2005-06-13 Thread Holger Levsen
Hi, On Friday 10 June 2005 04:02, Adam Majer wrote: > > > woody's kernels are vulnerable to CAN-2004-1235, a uselib() race > > condition. > > Will this be fixed for Woody? > > I thought the plan was to provide security support for Woody for > > another year? > AFAIK, there is no security support f

Re: kernel security bug #307900

2005-06-10 Thread Adam Majer
Olaf van der Spek wrote: > Adam Majer wrote: > >> AFAIK, there is no security support for Woody kernels for some time now. >> Use kernel.org and compile your kernels for security sensitive machines. > > > What's the reason for this lack of support? > > I think after Herbert Xu left so did security

Re: kernel security bug #307900

2005-06-10 Thread Olaf van der Spek
Adam Majer wrote: Olaf van der Spek wrote: woody's kernels are vulnerable to CAN-2004-1235, a uselib() race condition. Will this be fixed for Woody? I thought the plan was to provide security support for Woody for another year? AFAIK, there is no security support for Woody kernels for s

Re: kernel security bug #307900

2005-06-09 Thread Adam Majer
Olaf van der Spek wrote: > > woody's kernels are vulnerable to CAN-2004-1235, a uselib() race > condition. > > Will this be fixed for Woody? > I thought the plan was to provide security support for Woody for > another year? AFAIK, there is no security support for Woody kernels for some time now.

Re: Re: kernel security bug #307900

2005-06-09 Thread Olaf van der Spek
> woody's kernels are vulnerable to CAN-2004-1235, a uselib() race condition. Will this be fixed for Woody? I thought the plan was to provide security support for Woody for another year? -- Olaf van der Spek http://xccu.sf.net/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "

Re: kernel security bug #307900

2005-06-05 Thread Steve Langasek
On Mon, Jun 06, 2005 at 08:28:17AM +1000, Brian May wrote: > > "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: > Steve> kernel-image packages built against 2.6.8-16 are available > Steve> in sarge for the past week or so for i386, alpha, and ia64. > [...] > Steve> In light

Re: kernel security bug #307900

2005-06-05 Thread Brian May
> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: Steve> kernel-image packages built against 2.6.8-16 are available Steve> in sarge for the past week or so for i386, alpha, and ia64. [...] Steve> In light of the announcement at the beginning of May that Steve> sarge is

Re: kernel security bug #307900

2005-06-05 Thread Steve Langasek
On Sun, Jun 05, 2005 at 12:22:07PM +1000, Brian May wrote: > Whats the deal with bug #307900? > As far as I can tell from reading the bug report, the bug has not been > fixed in sarge, will not be fixed for the release, but the bug has > been closed. kernel-source-2.6.8 2.6.8-15 has been in testi

Re: kernel security bug #307900

2005-06-05 Thread Hamish Moffatt
On Sun, Jun 05, 2005 at 12:22:07PM +1000, Brian May wrote: > As far as I can tell from reading the bug report, the bug has not been > fixed in sarge, will not be fixed for the release, but the bug has > been closed. > > Have we come to the point where making a release is more important > then fixi