Re: Some clarifications about the Debian-security-HOWTO

2004-03-03 Thread Javier Fernndez-Sanguino Pea
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 I've rewritten that in the CVS version, should be available in the website soon. Please review it in a few days. Regards Javier -- To

Re: Some clarifications about the Debian-security-HOWTO

2004-03-03 Thread Javier Fernández-Sanguino Peña
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 I've rewritten that in the CVS version, should be available in the website soon. Please review it in a few days. Regards Javier

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Adrian 'Dagurashibanipal' von Bidder
On Saturday 21 February 2004 01.14, Matt Zimmerman wrote: On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: Uploads that fix a security hole should have the priority set to high, and this should reduce the transition delay to less than a week [1], shouldn't it? It will

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Daniel Kobras
On Sat, Feb 21, 2004 at 09:09:24AM +0100, Adrian 'Dagurashibanipal' von Bidder wrote: ... and sometimes people forget to leave urgency at 'high' until the fix is really in testing when they upload a new version. Doesn't make a difference. The testing scripts take into account the maximum

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Adrian 'Dagurashibanipal' von Bidder
On Saturday 21 February 2004 01.14, Matt Zimmerman wrote: On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: Uploads that fix a security hole should have the priority set to high, and this should reduce the transition delay to less than a week [1], shouldn't it? It will

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Daniel Kobras
On Sat, Feb 21, 2004 at 09:09:24AM +0100, Adrian 'Dagurashibanipal' von Bidder wrote: ... and sometimes people forget to leave urgency at 'high' until the fix is really in testing when they upload a new version. Doesn't make a difference. The testing scripts take into account the maximum

Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Gian Piero Carrubba
From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 When a security fix is prepared, packages are prepared for unstable and the patch is back ported to stable (since stable is usually some minor or major versions behind). Packages for the stable distribution are

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Michael Stone
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: But this is not always true. Sometimes the DSA reports For the unstable distribution (sid) these problems will be fixed soon. Why this ? The security team has nothing to do with sid packages. If a fix is ready when the advisory

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Matt Zimmerman
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 When a security fix is prepared, packages are prepared for unstable and the patch is back ported to stable (since stable is usually some

Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Gian Piero Carrubba
From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 When a security fix is prepared, packages are prepared for unstable and the patch is back ported to stable (since stable is usually some minor or major versions behind). Packages for the stable distribution are

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Michael Stone
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: But this is not always true. Sometimes the DSA reports For the unstable distribution (sid) these problems will be fixed soon. Why this ? The security team has nothing to do with sid packages. If a fix is ready when the

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Matt Zimmerman
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: From http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 When a security fix is prepared, packages are prepared for unstable and the patch is back ported to stable (since stable is usually some