Slashdot Mirror

← Back to Stories (view on slashdot.org)

KDE 3.1 Delayed - For A Very Good Reason

Posted by timothy on from the measuring-twice dept.

woobieman29 writes "KDE.news reported on Saturday that the KDE 3.1 release that was scheduled for this week has been delayed until early January. This is happening due to some security concerns that have arisen during a security audit of the 3.1 CVS tree. Kudos to the KDE team for making sure that the product is fully baked before release.!"

4 of 31 comments (clear)

  1. RC? by Trusty+Penfold · · Score: 5, Insightful


    Obviously delaying the release until the security holes are fixed is the only course of action.

    Since the betas and RC are now going to be exposed to the world for longer, are the security holes going to be disclosed so that we can take some action to secure our systems that are running these pre-release builds?

    1. Re:RC? by RAMMS+EIN · · Score: 3, Insightful

      ``Since the betas and RC are now going to be exposed to the world for longer, are the security holes going to be disclosed so that we can take some action to secure our systems that are running these pre-release builds? ''
      They don't have to. After all, betas and even RCs are clearly not guaranteed to be bug free. Developers don't even have the moral obligation to support them. If you are concerned about [security] bugs, run a stable version.

      --
      Please correct me if I got my facts wrong.
  2. Re:Thank God by Randolpho · · Score: 3, Insightful

    You know... Microsoft gets a big bum rap for a lot of its security holes. I will admit they tend, like every other major software company out there to release programs that need a patch or two, but (aside from those dreaded buffer overflows, which they still can't seem to get around) most of the stuff that is considered a "security hole" by the fine *nix crowd is really what they claim it is; a feature.

    You can blame market research for finding the desire for those "features", to be sure, but a lot of this stuff was put there because people wanted it there.

    --
    "Times have not become more violent. They have just become more televised."
    -Marilyn Manson
  3. Re:Plus ca change by shaitand · · Score: 3, Insightful

    MSIE doesn't render a page right: A perpetual bug that will never get fixed, probably doesn't render standards based code right due to some microsoft "proprietary" adaptation they call a "feature" and implemented intentionally to insure that since they have a monopoly web developers will code to match their "feature" and thus only MSIE will render the page right from there on. Linux gaping security hole: A MCSE who doesn't know how to properly configure a server and thinks he's hot for setting up a linux system. Or if it is an actual hole, something that will be usually be squashed within a couple hours of being discovered, most likely by the hacker who discovered it since he has a sense of community and is confident there are enough of the former to keep him in buisness for eternity.