From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 50CAF138206 for ; Wed, 3 Jan 2018 21:48:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AA1CCE0872; Wed, 3 Jan 2018 21:48:06 +0000 (UTC) Received: from mail-pl0-x243.google.com (mail-pl0-x243.google.com [IPv6:2607:f8b0:400e:c01::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 462EAE084A for ; Wed, 3 Jan 2018 21:48:06 +0000 (UTC) Received: by mail-pl0-x243.google.com with SMTP id b12so2024261plm.3 for ; Wed, 03 Jan 2018 13:48:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=H8pHJK3gWkh0EBO41NMEoiwtXXRI68NJb3uMpJq0Zxw=; b=kaRhhUXt+lL+d9pnThrdwCw13hhUDBY+ncMq+BMgkHz9wUklS8kHColWMUmkbwGKqH GjWh4XRFxMLIZ04VNp6MV5z01gcYvIMs098i+eNGFF/7gZ5x03TVxRr91rJqcF0NXefw /fKsXtKk/Lyf5phVrQ4Gs52k6z2PS8kKfLmeujUMqJ5Cvn+uwMbAl9ksSu/ZvJMVr8dt SbrknOq+fh+3rHtLf6q+Ug+M98m7dSObCNIulFXwu5dPzogiJLxSsT3hNKsWYQ2Yxhzy SiFdpSmodyreLGRAEzTnAhHLEf+ZNdIJ0YyO1ty5M6womANRjv9ke7rCt/iTN4xz8U2I RLZA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=H8pHJK3gWkh0EBO41NMEoiwtXXRI68NJb3uMpJq0Zxw=; b=Gp7RmQHqHWUaYYEiLPwIHPkb2/XwD8kP1RNX+BdmPrLPCvIw9BlP9l8Rxwcpx8wq8J EAVZCsCiQ/Fkd3etXzqwk56H3l0Q26brq6DY6+BhUR2ldqt4TpGrZRAwxA6nNCMYID7P Mb2Up0VmC63E9znnHbFEJQAquMuAjglH1UafFZIHijnbfPZtQL9IiBF1JQpBON+//mXz rN0SLKxvKM9K40BlP79Ew7Lh2NhbHrNGehPjB9Lg/uIsjNa/xDGewDIiYsQZYbf+8oGp K4SUZQUvBfLmHAbpGuv6TWyy7Vniy2DoA1XJwi+VpegD7uMjdo0ObIL8qHZo0IS+tC6K psvA== X-Gm-Message-State: AKGB3mKFLZ1D9dxGgPzrO+oARqMkRrzEKSfZMuWIX0/Rw4eP1jRfBe+s 6GPz4iA8Hj+D2gazmjPIu0on+tyRcTSpwWbgYdkLzA== X-Google-Smtp-Source: ACJfBotmrZwSQ+y3L4OJHanB78nh4S2kMjisHeyX8x30b8dFql9AI4zauOZ3ENj8WpE3BKRKyV6kvASkDT+NG08+e+o= X-Received: by 10.84.232.194 with SMTP id x2mr2701495plm.111.1515016084862; Wed, 03 Jan 2018 13:48:04 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Sender: freemanrich@gmail.com Received: by 10.100.151.169 with HTTP; Wed, 3 Jan 2018 13:48:04 -0800 (PST) In-Reply-To: References: <2CA973AB-B583-4F4F-A0B3-0FE347A672BD@stellar.eclipse.co.uk> From: Rich Freeman Date: Wed, 3 Jan 2018 16:48:04 -0500 X-Google-Sender-Auth: ZQF_R1d-1AZGaAJv3vA0F0JMVwE Message-ID: Subject: Re: [gentoo-user] old kernels are installed during the upgrade To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset="UTF-8" X-Archives-Salt: dc50ad56-051c-41de-9652-736cc82dc6b1 X-Archives-Hash: 1492e0c695acc68884f825a2eb40851b On Wed, Jan 3, 2018 at 4:21 PM, Stroller wrote: > > If the kernel devs cared to announce when they were patching exploits then we could take each > one under consideration individually. But the kernel devs are secretive about kernel exploits, because > they know there are literally millions of systems out there on the internet with kernels months and years old. > I'm skeptical of that claim. I think it is more that they don't want to try to track which commits are associated with CVEs. I believe they've said as much publicly. They're not particularly secretive about exploits except when they're under embargo (such as at the present moment). -- Rich