Re: CAN-2005-0001, CAN-2004-1235, CAN-2004-1137, CAN-2004-1016, Georgi Guninski security advisory #72, 2004, grsecurity 2.1.0 release

[Jan Lühr <jluehr@gmx.net>]

Greetings,

Am Freitag, 14. Januar 2005 09:17 schrieb Adrian von Bidder:
> On Thursday 13 January 2005 10.53, Jan Lühr wrote:
> > Btw. AFAIK kernel.org  recommend not using their kernels, because they
> > give no security support.
>
> kernel.org (or rather, the people on lkml) doesn't know where it's head,
> hands and feet are relative to each other.  They're a bunch of individuals
> with very, very widely different opinions on how things should be handled.
>
> Browse the kernel-traffic newsletter or the lkml archives, there's a debate
> over how releases and security should be handled about every other week.
> There's a debate right now about creating an official security contact for
> the kernel, I really hope that this will get somewhere, but don't hold your
> breath until it can actually be seen to work.

I won't - I'll use the debian security support instead - although, refering to 
this discussion the kernel-source-2.4.18 security support "crew left planet 
earth due to extraterrestrial commitments" [1] ...

Keep smiling
yanosz
[1] http://www.ccc.de/updates/2004/camp-server-hack (relevant English text see 
below)


-- 
Achtung: Die E-Mail-Adresse jluehr@netcologne.de wird in Kürze 
deaktiviert werden. Bitte nutzen Sie die Adresse
jluehr@gmx.net