Re: Identify security-related patches

[Valdis . Kletnieks]

On Thu, 02 Sep 2004 11:48:07 PDT, Chris Wright said:
> * Frank Steiner (fsteiner-mail@xxxxxxxxxxxxxx) wrote:
> > is there an easy way to identify all security-related patches out of the
> > mass of patches floating around  on linux.bkbits.net or the kernel bugzilla?
> 
> No, there's not.  It's not as simple as it seems.  Your best bet is
> monitoring vendor updates, as they have the same goal.  Occasionaly
> things get applied with a CVE candidate number (CAN-YYYY-NNNN), and
> those are security relevant.

Another point to remember is that there are probably many times that we've
fixed something because it's a bug, and only later find out that it's a bug
with security implications...

Attachment: pgp00000.pgp
Description: PGP signature