Re: CVE-2014-4699

"Anthony G. Basile" <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]> 
On 07/10/14 12:51, Alex Efros wrote:
> Hi!
>
> Anyone bothers to stabilize 3.14.11-r1 anytime soon because of subj?
>

Anyone = me.  You can address these concerns to me personally as I am 
responsible.  Bugs are best so we have a public record.

I am aware of the issue.  There have been too many rapid stabilizations 
because of CVE-2014-3153 and other issues.  It doesn't help if I 
stabilize a kernel which panics on someone's hardware that I can't test 
on --- security issue or not.  Been there done that.  There is a balance 
of risk which your statement does not take into account.

-- 
Anthony G. Basile, Ph.D.
Gentoo Linux Developer [Hardened]
E-Mail    : [email protected]
GnuPG FP  : 1FED FAD9 D82C 52A5 3BAB  DC79 9384 FA6E F52D 4BBA
GnuPG ID  : F52D4BBA
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.