Jeff wrote:

>I posted this a while ago and no one seems to have an answer for me.  Yes, I 
>do have the link for ssh update.  I am asking if any of the mirrors actually 
>update for these security vulnerabilities?  Is there anywhere to get them all 
>at once, or do I have to find a different website for each one?
>
>Thanks
>Jeff
>
>On Friday 08 March 2002 08:29 pm, you wrote:
>
>>I suppose I am not the only one to see the recent security notices on SSH,
>>etc.  I have not been able to find a US mirror with the updated packeages
>>yet.  I have tried using MandrakeUpdate and manually searching the ftp's
>>for the files.  Does anyone out there know where I can find a mirror that
>>is updated more frequently, or anyplace to get the update packages?
>>
>>Thanks,
>>
>>Jeff
>>
>
>
>------------------------------------------------------------------------
>
>Want to buy your Pack or Services from MandrakeSoft? 
>Go to http://www.mandrakestore.com
>
First of all, we check to see if the vulnerability applies to us at all. 
 Many times it does not.  Whether we have an inapplicable situation or a 
security update to do, the result is that security advisories get 
posted.  You can access these at www.linux-mandrake.com by clicking on 
the red security banner at the top of the page, then clicking on the 
distribution you use.

When you use MandrakeUpdate / SoftwareManager you get a popup about 
security sites and you can link to the one of your choice right there, 
then when you see an advisory, just use Software Manager to do the 
update (unless it is a kernel, which you must download and _install_. 
 Updating a kernel has a .999 probability of breaking things in your 
system, so DON'T DO IT!  Install the new kernel and link it in to your 
bootloader --this is mostly automatic).

OK I hope that answers your question.  Also realize that we have minimal 
staffing to make a distro and the security team works really hard, but 
cannot release anything till QA clears it with tests.  You may see 
others release three security updates (one plus two bugfixes) while we 
do one, but that isn't because we don't care, just that we have a 
different style.

Civileme



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to