[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: harden-* conflict with bad kernels?

On Mon, Dec 08, 2003 at 03:22:34AM -0600, Ryan Underwood wrote:
> harden-localflaws package conflicts with some kernel-image packages
> (needs to be updated for the <2.4.23 vulnerability) in order to ensure
> that they are removed.

They are not vulnerable on at least 3 architectures, Debian supports.

> Would it be a better idea to, instead of removing the bad kernel package
> through a Conflicts: , instead through postinst on install and each
> update, scan the system for bad kernel packages and tell the admin about
> them so he can take manual action about it?

Write a proper test for the vulnerability (i don't think this is


I'm frequently appalled by the low regard you Earthmen have for life.
		-- Spock, "The Galileo Seven", stardate 2822.3

Attachment: signature.asc
Description: Digital signature

Reply to: