From: "Massimo Cetra" <mcetra@navynet.it>
To: "'Barry K. Nathan'" <barryn@pobox.com>, "'O.Sezer'" <sezeroz@ttnet.net.tr>
Cc: <linux-kernel@vger.kernel.org>, <marcelo.tosatti@cyclades.com>
Subject: RE: Linux 2.4.28-rc4
Date: Fri, 19 Nov 2004 01:10:32 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <20041118204841.GA11682@ip68-4-98-123.oc.oc.cox.net>
Thread-Index: AcTNyelVzgCAOurJSiCJtYYW2pTlMAAAYxfw
Message-Id: <20041119001033.B25D48400A@server1.navynet.it>
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1131
Lines: 28

> Marcelo and I discussed this via private e-mail; it's in the 
> queue for 2.4.29-pre. I think in the end we both agreed that 
> it's too late in the
> 2.4.28 cycle to include these patches.
> 
> -Barry K. Nathan <barryn@pobox.com>

Why such a decision ?

Do you think that it is not exploitable or at least not in a short time ?

I don't think 2.4.29 will see the light in a short time so, unless there are
serious problems arising from these patches (and 2.6 should be affected
too), I think that for the sake of security it may be worthy and clever
includind these patches (and delay 2.4.28 for some days...)

M$ is waiting for a gold occasion to shot on linux. 
A known buffer overflow, not patched soon, may be used against linux and,
what interest me more, we could avoid updating kernels on tons pf production
servers for something which could be patched before.

Massimo Cetra

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/