Re: RFC: Starting a stable kernel series off the 2.6 kernel

Lee Revell
2005-12-05T21:40:42Z

On Mon, 2005-12-05 at 22:05 +0100, Florian Weimer wrote:
> * Lee Revell:
>
> >> The point that just escaped you as the motivation for this thread was
> >> the availability of security (or other critical) fixes for older
> >> kernels. It would all be fine if, say, the fix for CVE-2004-2492 were
> >> available for those who find 2.6.8 works for them (the fix went into
> >> 2.6.14 BTW), and the concern is the development model isn't fit to
> >> accomodate needs like this.
> >>
> >
> > If you want security fixes backported then you can get a distro kernel.
>
> And these distro kernels appear magically from nowhere?
>

No you get them from Red Hat or SuSE or whoever. One of the core
assumptions of the new development model is that distros whose business
model involves paying people to do QA and regression testing and have
access to bug reports from zillions of users are better positioned than
kernel developers to decide what a "stable" kernel is.

Lee