3 ms·
What a ridiculous comment, a non-LTS release introducing new features are one of its core features. A security issue being introduced via upstream code is not
by Daviey 13y ago
What a ridiculous comment, a non-LTS release introducing new features are one of its core features. A security issue being introduced via upstream code is not something that should be an opportunity to berate Ubuntu. The way Ubuntu responded with a super quick turnaround should be praised.
Note, that Kees who raised it to linux-distro’s is a member of the Ubuntu Technical Board, Ubuntu provided a fixed kernel as part of the embargoed security window of a mere 2 days(!) and Kamal Mostafa (Canonical) provided a rebased patch back to upstream Linux 3.8.
Ubuntu was even praised on the disclosure thread [0], for this super-fast turnaround. This only cements my confidence in the Ubuntu product.. and has helped sow the seeds for an exciting Ubuntu 14.04 LTS release.
Seems the whole process worked as a well-oiled machine, making the whole Linux ecosystem safer. Note, these types of issues only tend to get discovered when they are enabled in the wild.
[0] http://seclists.org/oss-sec/2014/q1/201 http://seclists.org/oss-sec/2014/q1/201
- microcolonel 13y agoFedora and Archlinux are both bleeding-edge upstream releases, and neither of them were comfortable enabling X32.