Re: Linux 2.6.17.10

From: Jan Engelhardt
Date: Wed Aug 23 2006 - 04:53:44 EST


>> > Sridhar Samudrala:
>> > Fix sctp privilege elevation (CVE-2006-3745)
>>
>> I've seen gazillions of CVE numbers for SCTP over the past months.
>>
>> Should perhaps SCTP be dropped from the kernel until it has been audited
>> for security by at least two independent parties?
>
>the thing, luckily no one really uses it in the wild :)

If other OS (such as mswin32) supported it, it would indeed get more
testing.


Jan Engelhardt
--
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/