Jeff wrote: >>First of all, we check to see if the vulnerability applies to us at all. >> Many times it does not. Whether we have an inapplicable situation or a >>security update to do, the result is that security advisories get >>posted. You can access these at www.linux-mandrake.com by clicking on >>the red security banner at the top of the page, then clicking on the >>distribution you use. >> >>When you use MandrakeUpdate / SoftwareManager you get a popup about >>security sites and you can link to the one of your choice right there, >>then when you see an advisory, just use Software Manager to do the >>update (unless it is a kernel, which you must download and _install_. >> Updating a kernel has a .999 probability of breaking things in your >>system, so DON'T DO IT! Install the new kernel and link it in to your >>bootloader --this is mostly automatic). >> >>OK I hope that answers your question. Also realize that we have minimal >>staffing to make a distro and the security team works really hard, but >>cannot release anything till QA clears it with tests. You may see >>others release three security updates (one plus two bugfixes) while we >>do one, but that isn't because we don't care, just that we have a >>different style. >> >>Civileme >> > > >I should have been more specific...First, Thanks for answering! > >Second, I have used MandrakeUpdate/SM to try and find the packages. I have >also tried to find them manually on the various mirrors on Mandrake Linux's >download section. I have >ftp://ftp.stealth.net/pub/mirrors/ftp.mandrake.com/Mandrake/updates/8.1/RPMS >listed as my security site in SM. I have tried changing this site as well >with no luck. I have searched the ftp mirrors with find files in Konq using >the package names supplied in the Sec. notice Emails. > >My question is, Is there a reliable (i.e. frequently updated mirror) for >these packages? I understand that maybe not every advisory applies to me, I >like to keep things patched up. > >After rereading the last paragraph of your answer, I take it to mean that a >Sec. notice says, "We know about the problem. We are working on fixing it. >Here is what it will be called when it is released." If I am wrong in that >interpretation please correct me. > >Thanks, > >Jeff > > >------------------------------------------------------------------------ > >Want to buy your Pack or Services from MandrakeSoft? >Go to http://www.mandrakestore.com > The notice comes out when the update is available... Usually at the same time as it is set for reading by the mirrors, so there may be a delay before it appears on your chosen security mirror.
Since most of our mirrors are volunteer and since there are still some glitches in SM, (mostly occurring when a download breaks for connection reset reasons) there is not always a single site that will answer your questions or get you your updates. I do not recommend the one you are using and I suggest you delete it, even if it requires reinstalling SM. If you are using 8.0, then update to 8.2 where the SM is finally pretty stable. The most glaring problem in 8.1 is that it still _updates_ kernels and fries the eyebrows off of thoose who don't read the security notice before they hit the button. Civileme
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
