Hi Jan,
you are right. I am not sure, how we can improve the security on Debian ? Is the security team to small ? Some security holes are not so easy to fix, because the most of this fix-patches exists only for newer versions. To bring the patch back to a older version it is not always so easy and need a test phase too.


Nice greetings,
Harald



Jan LÃhr wrote:
Greetings,

Am Sonntag 03 April 2005 22:57 schrieb Harald Krammer:

Hi Jan,
I had the same question but this is a while ago.  At the moment I use
kernel 2.4.27 from backport.org.

Here is the link from the old thread:
http://lists.debian.org/debian-security/2005/01/threads.html#00201


Me, too ;)
However, I gave you some *explanation" that time ;-)
However,
Btw. I'm quite worried about the Shape of Debian's security.
Take CAN-2004-1154 "[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution" for instance.
Fixed in Samba: 15th December 2004 (with 3.0.10 from samba.org) Fixed in SuSE: 22th December 2004 Fixed in Woody: 31st. March 2005


That ain't good.

Keep smiling
yanosz





--

Harald Krammer
Brucknerstrasse 33
A - 4020  Linz
AUSTRIA

Mobil +43.(0) 664. 130 59 58
Mail: hkrammer at a1.net

Please avoid sending me Word or PowerPoint attachments.
See
http://www.fsf.org/philosophy/no-word-attachments.html


-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Reply via email to