LinuxInsider: Linux Security Holes Opened and Closed

[ Thanks to Jason Greenwood for this link. ]

"In stark contrast to the long waits typical for Windows users wanting to patch software vulnerabilities, recently discovered security weaknesses in the core of the Linux operating system were addressed by major vendors in a matter of just a few days this week.

"Two security vulnerabilities in the Linux kernel's memory management code reported by security researcher iSEC were addressed and are now fixed in versions 2.4.25 and 2.6.3 of the Linux kernel. Linux vendors and distributors that have released fix updates include Red Hat, Novell's SuSE Linux and the Debian Project.

"Independent security expert Ryan Russell said that regardless of the Windows-Linux debate over which operating system is more secure, there is little doubt that open-source vendors respond more quickly when vulnerabilities emerge..."

Complete Story

Related Stories:

• Debian GNU/Linux Advisory: kernel-image-2.4.17-ia64, xfree86(Feb 20, 2004)
• Conectiva Linux Advisories: xfree86, kernel(Feb 20, 2004)
• CNET News: Linux Servers at Risk from Trifecta of Flaws(Feb 20, 2004)
• Debian GNU/Linux Advisory: kernel-patch-2.4.17-s390, kernel-image-2.4.17-s390(Feb 19, 2004)
• Debian GNU/Linux Advisories: kernel(Feb 18, 2004)
• Slackware Linux Advisories: kernel, metamail(Feb 18, 2004)
• Gentoo Linux Advisories: kernel, phpMyAdmin(Feb 17, 2004)