Re: Debian Kernel security status?
Jan Luehr wrote:
> Therefore I suspect, that the debian kernel do have some security flaws, fixed
> in mainline kernel months ago. Am I wrong here?
The current Sarge kernels have everything fixed (except some issues, which
were intentionally ignored). Since then a few new vulnerabilities have piled
up, but all of them are only minor (local) DoS vulnerabilities (which many vendors
don't fix at all, BTW) or information leaks.
The Sarge kernel build system doesn't allow weekly kernel updates for minor
issues, this will become better only with Etch, when kernels can be auto built.
Unless something grave creeps out before, the next Sarge update will be prepared
during DebConf.
> - I can say goodbye to linux and use Debian/kBSD
Which has no security support at all, great idea.
Cheers,
Moritz
Reply to: