Moving the updated vulnerability listings [LWN.net]

Moving the updated vulnerability listings

Posted Mar 17, 2008 22:50 UTC (Mon) by Max.Hyre (subscriber, #1054)
In reply to: Removing the updated vulnerability listings by asbjornsabo
Parent article: Removing the updated vulnerability listings

Count another who just skims past the updates, but occasionally wants to look them over. I'd have you put an entry in the Security page saying just ``Updated vulnerabilities'', with a link to a separate page (not included in the Front Page/Security/Kernel Development/... set).

If it's reasonably easy, maybe the page could have, in addition to current sort by vulnerability, another by distribution, so folks could choose to skip to what affects their particular installation. But only if this fits into in your Copious Free Time.

(Log in to post comments)

Filtering by distribution

Posted Mar 17, 2008 23:00 UTC (Mon) by corbet (editor, #1) [Link]

If by filtering by distribution you mean listing the vulnerabilities which have updates from a specific distributor, that could be done. If, instead, you're interested in vulnerabilities to which a specific distribution is exposed (a much more interesting question) it gets a lot harder. I would love to be able to present that information, but it would take a full-time person just to keep it current.

Filtering by distribution

Posted Mar 17, 2008 23:55 UTC (Mon) by Max.Hyre (subscriber, #1054) [Link]

listing the vulnerabilities which have updates from a specific distributor

I think that's what I have in mind. I'd click on (to take a less-than-random example) Debian, and get a list of updates they've put out recently:

Debian updates this week

Debian DSA-1493-1 2008-02-10
Debian DSA-1493-2 2008-03-16
Debian DSA-1466-1 2008-01-17
...

But for

vulnerabilities to which a specific distribution is exposed

Are you thinking of

Debian updates this week
SDL_image: buffer overflows

Debian DSA-1493-1 2008-02-10
Debian DSA-1493-2 2008-03-16
Xorg: multiple vulnerabilities

Debian DSA-1466-1 2008-01-17
...

That would be nice, but not required.

Moving the updated vulnerability listings

Posted Mar 17, 2008 23:07 UTC (Mon) by Max.Hyre (subscriber, #1054) [Link]

Besides, it would simplify life for kreutzm :-)

Moving the updated vulnerability listings

Posted Mar 20, 2008 18:23 UTC (Thu) by kreutzm (subscriber, #4700) [Link]

For several reasons (which just sync to this question by chance), I'm discontinuing these kind of comments, please refer to the security tracker in the future.

And nice that my comments where actually read!