Your post; >>27 Aug 2007 >>Fix is in my tree. >>An mcookie is generated for the terminal, and set as an xprop during login. >>Client must pass correct mcookie for connect to happen.
... You will forgive me if I'm a little confused. I know xprop, and I know roughly what X cookies are .. this doesn't sound like a "major" fix. ... >One that was almost impossible to backport into the distro. Really ?! (Aug 2007, three unanswered questions about backporting ...) >>27 Aug 2008 >>Ubuntu Edgy Eft is no longer supported, so a SRU will not be issued for this >>release. Marking Edgy as Won't Fix. What happened to the posting a year earlier saying, "sorry, fix is too complicated so we won't be back porting it"? Your previous postings and your historical update do seem to be rather "at odds". We implemented a one-off fix for our customer, took a few hours but it went in. It probably wasn't something that the designers or Ubuntu would have approved of, but it worked. Had the posting at the time said "won'tfix" I might have been inclined to submit the code for others, seeing "fix is in my tree" I did not. Given LTSP seems to be the cornerstone of EdUbuntu I'm a little gobsmacked that firstly nobody else spotted the issue and secondly it was deemed low priority. Just as a general note, when you're running a LTS version of Ubuntu with 50 users on one server running LTSP in a live environment, the very LAST thing you want to do is to upgrade the OS to fix a bug. (not least given Ubuntu's track record on upgrades as already mentioned) So my point stands, if Ubuntu are not prepared to backport critical security updates to current LTS versions (as it was at the time) it doesn't seem "safe" to use in a commercial production environment. Incidentally, one of the reasons this issue "rubs" is that I've "had" to upgrade to Intrepid to obtain fixes for stuff that isn't being backported to Hardy, unfortunately Intrepid currently has more holes than a sieve, random desktop logouts for no apparent reason and random screen lock-ups being two specific issues .. it seems like I'm forever chasing my tail just to get something that's stable. -- LTSPFS security is broken https://bugs.launchpad.net/bugs/133635 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
