Re: Bug #266882 still not fixed
On Mon, Jan 03, 2005 at 03:25:41PM -0800, Matt Zimmerman wrote:
> On Wed, Dec 15, 2004 at 11:27:58AM +0900, Horms wrote:
>
> > On Wed, Dec 15, 2004 at 12:59:24AM +0100, Tomasz Malesinski wrote:
> > > Why hasn't the bug #266882 (CAN-2004-0554 i387.h in kernel: asm
> > > volatile("fnclex ; fwait");) has not been fixed in 2.4.18 for so long?
> >
> > That and a host of others. Security-Team, Is there ever going to be a
> > new kernel for Woody?
>
> Any patches that you can provide would be gratefully received. The kernel
> has a huge number of vulnerabilities, and more are discovered all the time.
> Since the resources of the security team are limited, this work needs to be
> distributed to package maintainers wherever possible.
Understood. Would it be helpful if security patches for the 2.4 kernel
were forwarded to the security-team as they are added to SVN for
inclusion in unstable and thus testing? Perhaps being better about
opening entries on the BTS for security bugs, being better about
posting patches to these entires, and being better about tagging
them as security would be a mechanism to do this.
--
Horms
Reply to: