Security, the experts like to tell us, is a process, not a product. With open source that can be a very good thing since when security problems are found they can be fixed quickly. That's the case over this last weekend, Feb. 9-10, when <A HREF="http://www.linux-watch.com/news/NS8844914464.html?kc=EWKNLLIN021208FEA1">a security problem was found,</A> and given a hot fix, in the 2.6.17 to the most recent production Linux kernel, 2.6.24.1. The problem's exploit was first shown on the security site Milw0rm. The specific trouble is with the kernel system call sys_vmsplice.