> First of all, we check to see if the vulnerability applies to us at all. > Many times it does not. Whether we have an inapplicable situation or a > security update to do, the result is that security advisories get > posted. You can access these at www.linux-mandrake.com by clicking on > the red security banner at the top of the page, then clicking on the > distribution you use. > > When you use MandrakeUpdate / SoftwareManager you get a popup about > security sites and you can link to the one of your choice right there, > then when you see an advisory, just use Software Manager to do the > update (unless it is a kernel, which you must download and _install_. > Updating a kernel has a .999 probability of breaking things in your > system, so DON'T DO IT! Install the new kernel and link it in to your > bootloader --this is mostly automatic). > > OK I hope that answers your question. Also realize that we have minimal > staffing to make a distro and the security team works really hard, but > cannot release anything till QA clears it with tests. You may see > others release three security updates (one plus two bugfixes) while we > do one, but that isn't because we don't care, just that we have a > different style. > > Civileme
I should have been more specific...First, Thanks for answering! Second, I have used MandrakeUpdate/SM to try and find the packages. I have also tried to find them manually on the various mirrors on Mandrake Linux's download section. I have ftp://ftp.stealth.net/pub/mirrors/ftp.mandrake.com/Mandrake/updates/8.1/RPMS listed as my security site in SM. I have tried changing this site as well with no luck. I have searched the ftp mirrors with find files in Konq using the package names supplied in the Sec. notice Emails. My question is, Is there a reliable (i.e. frequently updated mirror) for these packages? I understand that maybe not every advisory applies to me, I like to keep things patched up. After rereading the last paragraph of your answer, I take it to mean that a Sec. notice says, "We know about the problem. We are working on fixing it. Here is what it will be called when it is released." If I am wrong in that interpretation please correct me. Thanks, Jeff
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
