Re: Identify security-related patches

[Florian Weimer <fw@deneb.enyo.de>]

* Frank Steiner:

> is there an easy way to identify all security-related patches out of the
> mass of patches floating around  on linux.bkbits.net or the kernel bugzilla?
>
> I'm running 2.6.8.1 and would like to keep it as stable as possible, thus,
> only apply security patches. Currently I'm searching for "security" and
> alike on bitkeeper, but there seems to be no consistent marking.

No, there isn't.  You won't see any official kernel.org advisories
that could serve as guide, either.

However, your concentration might be a bit short-sighted.  Issues such
as stability (random crashes under load), data corruption (file
systems are corrupted on unmount) and performance (poor throughtput
with some USB devices) could be as important to your users as security
fixes.  In this area, vendor kernels can serve as a guide, too.

Unfortunately, there is no distributed source code management system
used by all these forks, so relating all those changes appears to be
quite complicated.