Don't forget about vulns in tcp/ip stack in summer 2005
2007/1/16, Olivier Meyer <[EMAIL PROTECTED]>: > > What really matters is the security of the applications you are > running(httpd, sshd, sendmail,...). If you keep those up to date, the > kernel really does not matter. If you look at > http://openbsd.org/security.html, most of the "openbsd" bugs really > are in openssh, the c library, or are a local privilege escalation > attack that cannot be exploited remotely.