diff options
Diffstat (limited to 'zarb-ml/mageia-dev/20110516/004813.html')
| -rw-r--r-- | zarb-ml/mageia-dev/20110516/004813.html | 95 |
1 files changed, 95 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/20110516/004813.html b/zarb-ml/mageia-dev/20110516/004813.html new file mode 100644 index 000000000..49f87c003 --- /dev/null +++ b/zarb-ml/mageia-dev/20110516/004813.html @@ -0,0 +1,95 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] Security Update Process + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20Update%20Process&In-Reply-To=%3C4DD13150.30204%40e-artisan.org%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="004707.html"> + <LINK REL="Next" HREF="004708.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] Security Update Process</H1> + <B>Stew Benedict</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20Update%20Process&In-Reply-To=%3C4DD13150.30204%40e-artisan.org%3E" + TITLE="[Mageia-dev] Security Update Process">stewb at e-artisan.org + </A><BR> + <I>Mon May 16 16:14:40 CEST 2011</I> + <P><UL> + <LI>Previous message: <A HREF="004707.html">[Mageia-dev] freeze push: perl +</A></li> + <LI>Next message: <A HREF="004708.html">[Mageia-dev] Security Update Process +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4813">[ date ]</a> + <a href="thread.html#4813">[ thread ]</a> + <a href="subject.html#4813">[ subject ]</a> + <a href="author.html#4813">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>OK, + +Mageia 1 is approaching quickly and we need to get our process in place +for security updates. We talked a bit about it a few weeks ago, and I +started a wiki page, but it needs more detail. Anne and I chatted on IRC +and it looks like we'll want to cutoff the "on the iso " updates at the +end of this week, so we need a process in place to release post-iso updates. + +ref: <A HREF="http://mageia.org/wiki/doku.php?id=security">http://mageia.org/wiki/doku.php?id=security</A> + +As I see it, initially we need, in no particular order: + +1) a means to build updates for the release (iurt setup for mga1?) +2) a means to publish updates (mail list, web page) +3) a means to manage/track the updates (bugzilla?) +4) work out/publish the process so we all know how it works + +And then of course we need people to be aware of vulnerabilities as they +are exposed. For now, we'll have be be slightly trailing until we can +show a history of releasing updates and hopefully gain access to the +closed list to get access to embargoed issues. Once that happens we will +possibly need additional infrastructure changes to keep the work +non-public before the embargo date. + +osvdb has a nice email aggregator that sends all the distro update +announcements, and the oss-security list has many of the CVE requests. +Unfortunately, my personal time hasn't allowed much more than a quick +read as they go by :/ I know many of you have been doing security +related bug reports and updates, which is great, thank-you. If anyone +wants to take a larger role in managing the process I'm more than happy +to let that happen. While I have experience, the time I'm able to commit +is less than helpful. + +Comments, volunteers? + +-- +Stew Benedict +New Tazewell, TN + + +</PRE> + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="004707.html">[Mageia-dev] freeze push: perl +</A></li> + <LI>Next message: <A HREF="004708.html">[Mageia-dev] Security Update Process +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4813">[ date ]</a> + <a href="thread.html#4813">[ thread ]</a> + <a href="subject.html#4813">[ subject ]</a> + <a href="author.html#4813">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |