1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%0A%20%3D%3Fiso-8859-1%3Fq%3FStatus_report_for_Mageia_1_updates%3D2C%3F%3D%0A%20%3D%3Fiso-8859-1%3Fq%3F_and_call%3D09for%3D3Fhelp_from_you_packagers%3F%3D&In-Reply-To=%3C201108261249.40831.stormi%40laposte.net%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="007562.html">
<LINK REL="Next" HREF="007567.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers</H1>
<B>Samuel Verschelde</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%0A%20%3D%3Fiso-8859-1%3Fq%3FStatus_report_for_Mageia_1_updates%3D2C%3F%3D%0A%20%3D%3Fiso-8859-1%3Fq%3F_and_call%3D09for%3D3Fhelp_from_you_packagers%3F%3D&In-Reply-To=%3C201108261249.40831.stormi%40laposte.net%3E"
TITLE="[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers">stormi at laposte.net
</A><BR>
<I>Fri Aug 26 12:49:40 CEST 2011</I>
<P><UL>
<LI>Previous message: <A HREF="007562.html">[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers
</A></li>
<LI>Next message: <A HREF="007567.html">[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7564">[ date ]</a>
<a href="thread.html#7564">[ thread ]</a>
<a href="subject.html#7564">[ subject ]</a>
<a href="author.html#7564">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Le vendredi 26 août 2011 12:33:34, nicolas vigier a écrit :
><i> On Fri, 26 Aug 2011, Maarten Vanraes wrote:
</I>><i> > Op vrijdag 26 augustus 2011 00:57:26 schreef nicolas vigier:
</I>><i> > > On Thu, 25 Aug 2011, Maarten Vanraes wrote:
</I>><i> > > > Sure, i'm packaging as fast as my RL (and mga2 dev TODO list) allows
</I>><i> > > > me. I guess you should ask Anssi if i'm ready or not. I must say
</I>><i> > > > that i'm not sure if security bugs are actually my thing though. I
</I>><i> > > > never hacked servers, so i don't really know much about it. But in
</I>><i> > > > any case, i'm packaging, and i suppose
</I>><i> > >
</I>><i> > > Doing security updates has nothing to do with hacking servers, it's
</I>><i> > > looking for the right patch to fix the issue, and updating the package
</I>><i> > > with the patch applied.
</I>><i> >
</I>><i> > but don't you have to test it that it actually works?
</I>><i>
</I>><i> And you don't know how to run an exploit ?
</I>><i>
</I>><i> It's interesting that when there is some work to be done, you never know
</I>><i> how to do anything, but it's never a problem to talk about anything like
</I>><i> an expert, give your opinion about everything, say what should be done,
</I>><i> how it should be done, etc ...
</I>
Well, AL13N is just saying what the current policy is, see
<A HREF="http://www.mageia.org/wiki/doku.php?id=updates_policy#roles">http://www.mageia.org/wiki/doku.php?id=updates_policy#roles</A>
"Security team" : "Design POC (Proof Of Concept) if necessary/possible to test
whether updated build is immune to issue"
Now, if the policy needs to be changed and security fixes no more need to be
verified when they can be, it will be less work for everybody, but also a lower
security level (people make mistakes).
Best regards
Samuel Verschelde
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="007562.html">[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers
</A></li>
<LI>Next message: <A HREF="007567.html">[Mageia-dev] Status report for Mageia 1 updates, and call for?help from you packagers
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7564">[ date ]</a>
<a href="thread.html#7564">[ thread ]</a>
<a href="subject.html#7564">[ subject ]</a>
<a href="author.html#7564">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
