Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5065
| From | Alexander Schreiber <als@thangorodrim.ch> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? |
| Date | 2016-10-20 01:00 +0200 |
| Message-ID | <su807-7Cg-39@gated-at.bofh.it> (permalink) |
| References | (5 earlier) <srtu2-6cx-37@gated-at.bofh.it> <srPux-4ML-9@gated-at.bofh.it> <srT57-7eS-1@gated-at.bofh.it> <stJbj-6WG-5@gated-at.bofh.it> <su0vw-2D0-43@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Wed, Oct 19, 2016 at 12:51:06PM -0200, Henrique de Moraes Holschuh wrote:
> On Tue, Oct 18, 2016, at 18:21, Florian Weimer wrote:
> > Right. Debian kernel updates can only be applied with a reboot. If
> > we publish a kernel update, its mere availability may put some of our
> > users out of compliance with their policies, which is why we batch
> > these updates.
>
> Is this correct? Really?
Well, in certain environments I would not be surprised by a security policy
that boils down to: "If a security patch from [authorized source] becomes
available, it must be applied to all applicable systems within [short time]."
Kind regards,
Alex.
--
"Opportunity is missed by most people because it is dressed in overalls and
looks like work." -- Thomas A. Edison
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-11 17:10 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Moritz Mühlenhoff <jmm@inutil.org> - 2016-10-11 17:30 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-11 22:10 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Moritz Muehlenhoff <jmm@debian.org> - 2016-10-11 23:10 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-12 12:50 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Michael Stone <mstone@debian.org> - 2016-10-12 17:20 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-13 16:50 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Michael Stone <mstone@debian.org> - 2016-10-13 20:40 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Florian Weimer <fw@deneb.enyo.de> - 2016-10-18 22:30 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Henrique de Moraes Holschuh <hmh@debian.org> - 2016-10-19 17:00 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Alexander Schreiber <als@thangorodrim.ch> - 2016-10-20 01:00 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Henrique de Moraes Holschuh <hmh@debian.org> - 2016-10-20 02:40 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Moritz Muehlenhoff <jmm@inutil.org> - 2016-10-12 22:40 +0200
Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-13 16:50 +0200
csiph-web