On Tue, 23 Nov 2010 03:55:28 +0000 Ben Hutchings <b...@decadent.org.uk> wrote:
> Recent review has revealed several bugs in obscure protocol > implementations that can be exploited by local users for denial of > service or privilege escalation. > > The x25 protocol (PF_X25) receives only 'odd fixes'. There appear to > be no published applications for it, and it has never progressed > beyond 'experimental' status. > > This protocol generally should not be enabled by distributions, since > the cost of a security flaw affecting all installed systems presumably > outweighs the benefit to the few (if any) legitimate users. > > Signed-off-by: Ben Hutchings <b...@decadent.org.uk> > --- > I'm somewhat less sure about this one; maybe it's improving? But there > is little enough sign of any usefulness after 10 years. > > There are several X25 dependencies that presumably should be moved too. No. If you don't like it then don't enable it. -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101122203155.27534...@nehalam
