brk bug and debian

[jjohnson at sunrise-linux.com (miah)]

Did you patch 2.4.18 for the multiple vulns it has ?  I'd be building 2.4.23 if i were you..

-miah

On Wed, Dec 03, 2003 at 01:49:44PM -0500, Bob Keyes wrote:
> 
> 
> On Wed, 3 Dec 2003, miah wrote:
> 
> > Sure, if you dont mind installs taking 3 days, or rebuilding everything once a week.
> 
> That's why I haven't switched yet. My poor 750 mhz system couldn't keep
> up. I guess I was just spouting out of frustration.
> 
> In any case, I am building a new 2.4.18 kernel from source.
> 
> About 8 years ago I had suggested to a certain linux security archive
> maintainer that a security archive for an OS should never run on that OS
> itself, because of the possibility of cascading security compromises.
> Pride aside, wouldn't it be interesting and useful if, for instance,
> security.debian.org were run on OpenBSD? It's abotu avoiding monoculture.