Ubuntu security vulnerabilities

Would you really trust a product riddled with so many security
vulnerabilities?
How many Ubuntu vulnerabilities have not yet been discovered?

Beware, not for the faint of heart, this list is huge:
http://www.ubuntu.com/usn

Marco

On Wed, 22 Aug 2007 00:45:41 +0200, Marco Desloovere wrote:

> Would you really trust a product riddled with so many security
> vulnerabilities?
> How many Ubuntu vulnerabilities have not yet been discovered?
>
> Beware, not for the faint of heart, this list is huge:
> http://www.ubuntu.com/usn
>

And who honestly gives a ****?

At least they publish their list of vulnerabilities. MS doesn't tell you
about it until you get to see a hotfix in your windows update.

--
Stephan
2003 Yamaha R6

������出�日�ん�����
����忘れ�������ら

Marco Desloovere wrote:
> Would you really trust a product riddled with so many security
> vulnerabilities?
> How many Ubuntu vulnerabilities have not yet been discovered?
>
> Beware, not for the faint of heart, this list is huge:
> http://www.ubuntu.com/usn
>
> Marco

I would trust the product, and the list IS huge. However, if you take
the time to look at the details, you would find that from the top
(latest vulnerability listed - reported 8/21/07) to the bottom (earliest
vulnerability listed - reported 10/22/04) of the list, all the
vulnerabilities have fixes available and are easily remediated. I quote
for the latest listed: "The problem can be corrected by upgrading your
system to the following package versions: (listing of packages). In
general, a standard system upgrade is sufficient to effect the necessary
changes."
The earliest has the same statement.
--
norm

norm wrote:
> Marco Desloovere wrote:
>> Would you really trust a product riddled with so many security
>> vulnerabilities?
>> How many Ubuntu vulnerabilities have not yet been discovered?
>>
>> Beware, not for the faint of heart, this list is huge:
>> http://www.ubuntu.com/usn
>>
>> Marco
>
> I would trust the product, and the list IS huge. However, if you take
> the time to look at the details, you would find that from the top
> (latest vulnerability listed - reported 8/21/07) to the bottom (earliest
> vulnerability listed - reported 10/22/04) of the list, all the
> vulnerabilities have fixes available and are easily remediated. I quote
> for the latest listed: "The problem can be corrected by upgrading your
> system to the following package versions: (listing of packages). In
> general, a standard system upgrade is sufficient to effect the necessary
> changes."
> The earliest has the same statement.

I get a little icon on the upper panel telling me there are updates.
Don't have to check every single program I have installed to know if
there is one or not which is one of many reasons that Ubuntu is more
user friendly than Windows.

--
Alias
To email me, remove shoes

Yes, all complex programs including OS' have bugs that can possibly be
exploited. Was this news to you or are you trolling?

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Marco Desloovere" <> wrote in message
news:...
> Would you really trust a product riddled with so many security
> vulnerabilities?
> How many Ubuntu vulnerabilities have not yet been discovered?
>
> Beware, not for the faint of heart, this list is huge:
> http://www.ubuntu.com/usn
>
> Marco

Define trolling

"Kerry Brown" <*a*m> wrote in message
news:72C92115-1907-4676-A9C5-...
> Yes, all complex programs including OS' have bugs that can possibly be
> exploited. Was this news to you or are you trolling?
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Marco Desloovere" <> wrote in message
> news:...
>> Would you really trust a product riddled with so many security
>> vulnerabilities?
>> How many Ubuntu vulnerabilities have not yet been discovered?
>>
>> Beware, not for the faint of heart, this list is huge:
>> http://www.ubuntu.com/usn
>>
>> Marco
>

In article <>,
says...
> Would you really trust a product riddled with so many security
> vulnerabilities?
> How many Ubuntu vulnerabilities have not yet been discovered?
>
> Beware, not for the faint of heart, this list is huge:
> http://www.ubuntu.com/usn

Alias and Adam are going to hate you - showing more than 500 exploits in
Ubuntu....

Latest one: Description "It was discovered that Jasper did not correctly
handle corrupted JPEG2000 images. By tricking a user into opening a
specially crafted JPG, a remote attacker could cause the application
using libjasper to crash, resulting in a denial of service."


--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

In article <faft25$hbt$>, says...
> I get a little icon on the upper panel telling me there are updates.
> Don't have to check every single program I have installed to know if
> there is one or not which is one of many reasons that Ubuntu is more
> user friendly than Windows.

All of the programs provided by MS get updates without me having to do
anything... Windows XP, Office 2003/2007... Server 2003....

My systems update as reliably as the last one I had running Ubuntu...

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

Leythos wrote:
> In article <>,
> says...
>> Would you really trust a product riddled with so many security
>> vulnerabilities?
>> How many Ubuntu vulnerabilities have not yet been discovered?
>>
>> Beware, not for the faint of heart, this list is huge:
>> http://www.ubuntu.com/usn
>
> Alias and Adam are going to hate you - showing more than 500 exploits in
> Ubuntu....
>
> Latest one: Description "It was discovered that Jasper did not correctly
> handle corrupted JPEG2000 images. By tricking a user into opening a
> specially crafted JPG, a remote attacker could cause the application
> using libjasper to crash, resulting in a denial of service."
>
>
And did you read the details on the exploit? The submission on the
exploit is 8/20/07. The resolution is as follows: The problem can be
corrected by upgrading your system to the following package versions:
(packages listed). In general, a standard system upgrade is sufficient
to effect the necessary changes.
There is nothing for anyone to hate. The exploits listed date back to
10/22/04 to the present. That's a fact. It is also a fact that they all
have been taken care of.
--
norm

http://en.wikipedia.org/wiki/Internet_troll

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"NonTarget" <> wrote in message
news:...
> Define trolling
>
> "Kerry Brown" <*a*m> wrote in message
> news:72C92115-1907-4676-A9C5-...
>> Yes, all complex programs including OS' have bugs that can possibly be
>> exploited. Was this news to you or are you trolling?
>>
>> --
>> Kerry Brown
>> Microsoft MVP - Shell/User
>> http://www.vistahelp.ca
>>
>>
>> "Marco Desloovere" <> wrote in message
>> news:...
>>> Would you really trust a product riddled with so many security
>>> vulnerabilities?
>>> How many Ubuntu vulnerabilities have not yet been discovered?
>>>
>>> Beware, not for the faint of heart, this list is huge:
>>> http://www.ubuntu.com/usn
>>>
>>> Marco
>>
>