Messages in this thread | | | Subject | Re: Identify security-related patches | From | Valdis.Kletnieks@vt ... | Date | Thu, 02 Sep 2004 15:12:27 -0400 |
| |
On Thu, 02 Sep 2004 11:48:07 PDT, Chris Wright said: > * Frank Steiner (fsteiner-mail@bio.ifi.lmu.de) wrote: > > is there an easy way to identify all security-related patches out of the > > mass of patches floating around on linux.bkbits.net or the kernel bugzilla? > > No, there's not. It's not as simple as it seems. Your best bet is > monitoring vendor updates, as they have the same goal. Occasionaly > things get applied with a CVE candidate number (CAN-YYYY-NNNN), and > those are security relevant.
Another point to remember is that there are probably many times that we've fixed something because it's a bug, and only later find out that it's a bug with security implications... [unhandled content-type:application/pgp-signature] | |