LWN.net Logo

Stable kernel 2.6.32.8

Stable kernel 2.6.32.8

Posted Feb 9, 2010 22:45 UTC (Tue) by ewan (subscriber, #5533)
In reply to: Stable kernel 2.6.32.8 by PaXTeam
Parent article: Stable kernel 2.6.32.8

right, in other words you didn't really answer the first part of my question: all we can know is that at least one security bug is fixed

That's all the summary text claimed! This really isn't complicated - Greg says there's a security fix, LWN reports that there's a security fix. No-one said they'd identified which one it was. I might equally well ask you how you determined that the moon is made of green cheese and populated by pink elephants and happy little elves. Since you didn't actually do that, you won't be able to point to specifics about it.


(Log in to post comments)

Stable kernel 2.6.32.8

Posted Feb 9, 2010 22:56 UTC (Tue) by bojan (subscriber, #14302) [Link]

Given this text:

"combined with verifying that a security problem really was fixed and backported properly"

It is obvious that:

- one security problem was identified
- one security fix was backported and tested

In other words, people that released this update already know which bug that is and they obviously know how they determined that. The question is, why can't we?

Stable kernel 2.6.32.8

Posted Feb 9, 2010 23:47 UTC (Tue) by PaXTeam (subscriber, #24616) [Link]

> That's all the summary text claimed!

not sure why you're bringing this up here, did anyone question that? what i asked since the beginning is to identify the security bug mentioned in the announcement. looks like you're none the wiser either though ;).

> Greg says there's a security fix, LWN reports that there's a security
> fix. No-one said they'd identified which one it was.

did i say that anyone had identified it? that's the very first question i'd asked in fact if you had cared to read the thread. according to nix it was a specific bug but then his guess is as good as mine since there're more security related bugs fixed as far as i can tell.

this is actually turning comical, are you saying that one can announce a fix for a security bug but not know which one it is? that's a new low in linux security.

Stable kernel 2.6.32.8

Posted Feb 10, 2010 1:26 UTC (Wed) by ewan (subscriber, #5533) [Link]

did anyone question that?

Not question, so much as assume. If you read your original question "which one's the security fix and how did you determine it?" as being addressed to LWN, which is clearly the sense in which Jake answered it, you're assuming that LWN knows which is the security fix, and has some way of identifying it. That appears not to be the case.

did i say that anyone had identified it?

Well, yes, you did rather. To ask how something was done is to beg the question as to whether it was done at all.

are you saying that one can announce a fix for a security bug but not know which one it is?

I'm saying that LWN can report on an announcement of a security fix without knowing which one it is. If your question was addressed to GregKH rather then LWN, perhaps you'd have been better making that clear, or even sending it directly to GregKH rather than LWN?

Stable kernel 2.6.32.8

Posted Feb 10, 2010 14:55 UTC (Wed) by PaXTeam (subscriber, #24616) [Link]

> If you read your original question [...]

...i would see it addressed to the generic 'you' (the reader), and not to any particular person. apparently i'm not alone in that interpretation as nix managed to answer despite not being LWN staff.

> you're assuming that LWN knows which is the security fix, and has some
> way of identifying it. That appears not to be the case.

with s/LWN/the person answering the questions/, that's exactly the point i wanted to make: there's once again no information helping to identify the security fix(es).

> I'm saying that LWN can report on an announcement of a security fix
> without knowing which one it is.

you may not remember it, but LWN had once proudly proclaimed this:

> We also humbly suggest the LWN security page as a central place to look
> to keep up on security issues.

the source: http://lwn.net/1999/features/MSResponse.php3 . oh boy, how the tables have turned since...

Stable kernel 2.6.32.8

Posted Feb 10, 2010 1:12 UTC (Wed) by rahvin (subscriber, #16953) [Link]

I might equally well ask you how you determined that the moon is made of green cheese and populated by pink elephants and happy little elves.
I might well ask you how you determined it's NOT. After all, everyone knows the elephants are green and it's the elves that are pink, and they aren't happy, in fact they are quite suicidal. Sheesh.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds