![]() | |||||||||||||
Messages in this thread |
On Iau, 2005-01-13 at 08:59, Florian Weimer wrote: > This is the exception. Usually, changelogs are cryptic, often > deliberately so. Do you still remember Alan's DMCA protest > changelogs? They were not cryptic, just following the law to the point it claimed neccessary.... That aside right now because Linus doesn't give us heads up we vendor spend our time scanning all Linus' diffs and playing spot the security fix because we know the bad guys do the same, and they are rather good at it. Its useful anyway - eg its how we found that base kernels have broken AX.25, and several other patches got tagged for immediate revert in the -ac tree (and of course reported back upstream to l/k) but its a pain to have to do it this way. Having a list that fed such notices on to vendor-sec with a date fixed by them is a real possible improvement - thats how we work with many other projects. I also don't see any reason that Linus or Andrew wouldn't be able to become a CAN issuing authority for security advisories. Alan - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 14:09 [from the cache] ©2003-2008 | |||||||||||||