Re: DSA 438 - bad server time, bad kernel version or information delayed?
> On Wed, Feb 18, 2004 at 11:59:06PM +0700, Jean Christophe ANDR? wrote:
> > Does any body could tell me why the /boot/vmlinuz-2.4.18-1-686
> > from kernel-image-2.4.18-1-686 version 2.4.18-12.2 is dated
> > Feb 1 19:53 instead of today???
Le mercredi 18 février 2004 à 18h06 (+0000), Steve Kemp écrivait :
> The obvious reason is that the kernel was built then, but the DSA
> wasn't released until now.
> (Maybe for coordination with other vendors, maybe to wait for all
> the other kernels to be built so there could be a release of them
> all at the same time).
I can see on http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0077
that this is still a candidate, but assigned since 2004.01.19, so this is
probably ok... But, it would be better if this "for security reasons"
delay had been made clear into the announcement, IMHO.
--
J.C. "プログフ" ANDRÉ <jean-christophe.andre@auf.org> http://www.vn.refer.org/
Coordonnateur technique régional / Associé technologie projet Reflets (CODA)
Agence universitaire de la Francophonie (AuF) / Bureau Asie-Pacifique (BAP)
Adresse postale : AUF, 21 Lê Thánh Tông, T.T. Hoàn Kiếm, Hà Nội, Việt Nam
Tél. : +84 4 9331108 Fax : +84 4 8247383 Mobile : +84 91 3248747
⎧ Note personnelle : merci d'éviter de m'envoyer des fichiers PowerPoint ⎫
⎩ ou Word ; voir http://www.fsf.org/philosophy/no-word-attachments.fr.html ⎭
Reply to: