The sysret kernel bug and the Linux fix from 2006 clearly demonstrate that Linux's policy of silently patching security bugs is problematic. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique