and one of the new things is that it includes Lazarus: http://www.damnvulnerablelinux.org/index.php/eng/Company/News/DVL%201.5%20has%20now%20left%20planning%20status.%20Bug%20Fixing%20started !

Not sure if that's a good or a bad sign.

I have sent an e-mail aking what vulnerabilities are present in Lazarus.

I don't remember anything in our bug tracker, so I find this rather odd. Maybe they just blindly included it.

Felipe Monteiro de Carvalho wrote

I have sent an e-mail aking what vulnerabilities are present in Lazarus. I don't remember anything in our bug tracker,

I remember a vulnerability in the Lazarus installation script being discussed fairly recently (which was reported on either the Fedora, Debian or Ubuntu bug trackers).

so I find this rather odd. Maybe they just blindly included it.

I doubt it.

Jonas

Zitat von Jonas Maebe :

I fixed the fixed /tmp/ directories 2 weeks ago.

> so I find this rather > odd. Maybe they just blindly included it. I doubt it.

Mattias

I doubt they'll include the latest snapshot. Especially since the whole point of Dam Vulnerable Linux is to have a system with as many exploitable apps in order to train sysadmins and other people interested in security on all potential gotchas.

Jonas