Recent patches

[neddie]

Has it struck anyone else that there seem to have been quite a large number of patches announced this week and last? And not just single, application-level ones but fairly fundamental ones like kdecore, qt3 and qt4, kernel and now xorg too.

 

For sure this is going to present some headaches for the testing of the new releases, like Mandriva 2007.1 and Ubuntu 7.04, cos releasing without these patches would be leaving the vulns open, but incorporating the (big!) patches and having to redo all the testing of all the affected components sounds like a lot of extra work!

[misfitpierce]

Yeah I noticed this somewhat... Crazy

[iphitus]

Has it struck anyone else that there seem to have been quite a large number of patches announced this week and last? And not just single, application-level ones but fairly fundamental ones like kdecore, qt3 and qt4, kernel and now xorg too.

 

For sure this is going to present some headaches for the testing of the new releases, like Mandriva 2007.1 and Ubuntu 7.04, cos releasing without these patches would be leaving the vulns open, but incorporating the (big!) patches and having to redo all the testing of all the affected components sounds like a lot of extra work!

 

shouldnt be a big concern. If it's just a security or bugfix, then they often can be applied, and tested minimally before releasing. Whether it's kdecore or kopete, it doesnt matter.

 

If it's a whole new major release, then it's usually not too difficult to just backport security fixes.

 

James