Patrick Useldinger wrote:
Michael Scherer wrote:
I doubt that slackware will die.
I hope so. But it is fragile in the sense that it depends on one person
only. And security updates are getting very rare.
Recently, Patrick Volkerding wrote the following remark in his Security
Advisory Changelog:
<quote>
Just a little note on Slackware security -- I believe the state of
Slackware right now is quite secure. I know there have been issues
announced and fixed elsewhere, and I am assessing the reality of them
(to be honest, it seems the level of proof needed to announce a security
hole these days has fallen close to zero -- where are the
proof-of-concept exploits?) It is, as always, my firm intent to keep
Slackware as secure as it can possibly be. I'm still getting back up to
speed (and I do not believe that anything exploitable in real life is
being allowed to slide), but I'm continuing to look over the various
reports and would welcome input at security(a)slackware.com if you feel
anything important has been overlooked and is in need of attention.
Please remember that I do read BugTraq and many other security lists. I
am not asking for duplicates of BugTraq posts unless you have additional
proof or information on the issues, or can explain how an issue affects
your own servers. This will help me to priorite any work that remains
to be done. Thanks in advance for any helpful comments.
</quote>
Greetings, Patrick