[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Linux kernel vulnerabilities in unstable



On Tue, 7 Jul 2009 00:34:54 -0400 Michael S. Gilbert wrote:

> On Tue, 7 Jul 2009 00:24:16 +0200 Francesco Poli wrote:
> > Should a grave bug be filed against the linux-2.6 source package, in
> > order to prevent its migration to testing until this regression is
> > fixed (or confirmed to be already fixed)?
> > Are you willing to do that, or do you prefer that I file the bug by
> > myself?
> 
> the kernel-sec team is already aware of these issues [1].  filing a bug
> may be useful to increase visibility, and to provide another place to
> discuss the problem; but not really necessary.

The idea was basically to file grave bugs as reminders to fix
regressions before linux-2.6 migrates to testing.

> 
> i believe kernel migration is a manual process (not entirely sure),

My impression is that a manual unblock is needed, but the process is
automatic for the remainder:

http://release.debian.org/migration/testing.pl?package=linux-2.6

Could some expert confirm this, please?

> and
> there are already plenty of RC bugs on the kernel, so 2.6.30 isn't
> migrating any time soon.

Well, if I see correctly, by "plenty" you mean 5:

http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=linux-2.6&archive=no&pend-exc=pending-fixed&pend-exc=fixed&pend-exc=done&sev-inc=critical&sev-inc=grave&sev-inc=serious&repeatmerged=no

Moreover, please note that all of these bugs are already present in
testing, as far as the BTS version tracking knows (unless I am
misinterpreting the BTS HTML output): as a consequence, none of them
should block the migration to testing.


-- 
 New location for my website! Update your bookmarks!
 http://www.inventati.org/frx
..................................................... Francesco Poli .
 GnuPG key fpr == C979 F34B 27CE 5CD8 DC12  31B5 78F4 279B DD6D FCF4

Attachment: pgpDuGIV03vXA.pgp
Description: PGP signature


Reply to: