Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: Calum <gentoo-security@...>
Subject: Kernels and GLSAs
Date: Tue, 20 Sep 2005 12:09:08 +0100
Hello all,

I was told recently that kernels weren't included in GLSA updates, and a
new tool called KISS (Kernel Interactive Security Status) was being
developed to analyse the running kernel for vulnerabilities.

I don't know if I missed an announcement about this, but this means that
I've been running with (probably) vulnerable kernels ever since kernels
weren't included in GLSAs, and that if I had missed it, maybe others had.
(I don't update my live boxes with anything that isn't a security
update, or a well tested upgrade to add new functionality).

I prefer the idea that tracking one source (GLSAs) would provide me with
all the information I needed to keep my Gentoo boxes secure, but if we
were all to change to a new system, perhaps the kernel GLSAs should have
overlapped with this new system until it was in, tested, and adopted?

I wonder what other people on this list think about this - again -
apologies if I missed any announcement about this.


Calum

-- 
gpg   : FC64 140F@...
jabber: calum@...
-- 
gentoo-security@g.o mailing list


Replies:
Re: Kernels and GLSAs
-- Brian G. Peterson
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
org-x11 GLSA 200509-07. Is bug #96053 fixed in -r3? (black icons)
Next by thread:
Re: Kernels and GLSAs
Previous by date:
Re: org-x11 GLSA 200509-07. Is bug #96053 fixed in -r3? (black icons)
Next by date:
Re: Kernels and GLSAs


Updated Jun 17, 2009

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.