Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Linux doesn't have a magic fix for buffer overflows in networking stacks written in C.


> except for clients that paid for an extended support deal

It does have a fix for this, though


Yeah, it's called "install the latest kernel".

Upgrading to a new version of Windows was apparently not possible, which also means that upgrading to a new Linux version would also have been out of the books.

So the only solution would have been to hire someone to backport whatever fix was needed.


An open source update can be audited much more easily than a closed source update. It is also usually possible, with OSSW, to find the discussion where the software's developers proposed various solutions, and debated their merits and risks.


Does Debian still support Woody? Does Red Hat still support whatever OS they were shipping in 2001?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: