Re: Kernel Security Updates for Sarge

[Sven Luther <sven.luther@wanadoo.fr>]

On Thu, May 12, 2005 at 02:21:16AM -0700, Steve Langasek wrote:
> On Thu, May 12, 2005 at 11:07:45AM +0200, Thiemo Seufer wrote:
> > Steve Langasek wrote:
> > [snip]
> > > > mips/mipsel has four additional changes which should go in sarge:
> > > > - Fix broken ptrace
> > > > - Fix Cobalt PCI bridge initialisation
> > > > - Work around crashes on Cobalt under I/O load
> > > > - Fix crash on startup on serial-less Cobalts
> 
> > > All of which seem to be out of scope in a discussion about security uploads,
> > > don't they?
> 
> > It would make little sense to do separate uploads for them.
> 
> It is nevertheless necessary, according to the security team's historical
> policy on security uploads.  You can upload whatever you want to
> testing-proposed-updates, *right now*, but it doesn't do our users any good
> until r1 unless we also get something uploaded to testing-security that will
> be accepted and actually made available for download.

Notice though that the right way to fix these issues would be to make a new
set of kernels available in sarge (even though they are not used by d-i), so
that our users get the real thing, and not the patently broken and full of
security issues kernel that we currently ship.

Friendly,

Sven Luther