lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4EA837AD.6070700@xenotime.net>
Date:	Wed, 26 Oct 2011 09:39:09 -0700
From:	Randy Dunlap <rdunlap@...otime.net>
To:	Mike Galbraith <efault@....de>
CC:	Valdis.Kletnieks@...edu, Greg KH <gregkh@...e.de>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>,
	torvalds@...ux-foundation.org, stable@...r.kernel.org, lwn@....net
Subject: Re: Linux 3.0.8

On 10/26/11 01:14, Mike Galbraith wrote:
> On Tue, 2011-10-25 at 04:41 -0400, Valdis.Kletnieks@...edu wrote:
>> On Tue, 25 Oct 2011 09:02:40 +0200, Greg KH said:
>>> On Mon, Oct 24, 2011 at 10:40:44PM -0700, Randy Dunlap wrote:
>>>> On 10/24/11 22:19, Greg KH wrote:
>>>>> All users of the 3.0 kernel series must upgrade.
>>>> I noticed that "must" word in 3.0.7 also.  Please explain.
>>> Nothing new, I've been saying that for years.
>>
>> I think Randy means that out of the 29 commits for .7->.8, there's only one
>> (Hugh Dicken's mremap fix) and *maybe* Peter Zijlstra's cputimer fix, which
>> even *possibly* rise to the "all users" level, as everything else is against
>> XFS or CIFS or ARM or something else that's not an across-the-board issue.
>>
>> And the changelog for the mremap commit says that "but this lucky report
>> hints", which sort of implies it's a very hard-to-hit bug that nobody even knew
>> was there.
>>
>> So it's not obvious from just the shortlog that it's a "MUST upgrade"  category.
> 
> Seems like perfectly fine boilerplate to me.  If I want the warmest
> fuzzy I can get, I must upgrade.  Peter's patch fixed a box killer that
> I don't care to hit (dead bugs being kinda boring), so I must upgrade.

Sure, if it's just boilerplate, that's fine.
My mistake was thinking that it was something new & different.


-- 
~Randy
*** Remember to use Documentation/SubmitChecklist when testing your code ***
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ