Re: Sid and security

2004-08-21 Thread Oliver Elphick
On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I note that when the Sarge installer created my sources.list file, it put a line in as follows: deb http://security.debian.org/ testing/updates main ... Question: Am I correct

Re: Sid and security

2004-08-21 Thread Michael Satterwhite
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 21 August 2004 10:32, Oliver Elphick wrote: On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I note that when the Sarge installer created my sources.list file, it put a line

Re: Sid and security

2004-08-21 Thread Stefan O'Rear
On Sat, Aug 21, 2004 at 04:32:41PM +0100, Oliver Elphick wrote: On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I note that when the Sarge installer created my sources.list file, it put a line in as follows: deb

Re: Sid and security

2004-08-21 Thread Oliver Elphick
On Sat, 2004-08-21 at 16:42, Stefan O'Rear wrote: Please correct me if I'm misunderstanding all this... Security team finds hole. Security team fixes hole. Security team NMU's woody-proposed-updates (exactly what section doesn't really matter.)

Re: Sid and security

2004-08-21 Thread John Hasler
Stefan O'Rear writes: Security team finds hole. Security team fixes hole. Security team NMU's woody-proposed-updates Security team contacts maintainer. Maintainer applies patch. Maintainer uploads to sid. Someone finds hole and notifies maintainer and/or security team. Security is notified

Re: Sid and security

2004-08-21 Thread Stefan O'Rear
On Sat, Aug 21, 2004 at 12:27:21PM -0500, John Hasler wrote: Someone finds hole and notifies maintainer and/or security team. Security is notified if they don't know already. Maintainer is notified if he doesn't know already. Security team and/or maintainer fixes hole. Security team NMU's

Re: Sid and security

2004-08-21 Thread John Hasler
Oliver Elphick writes: The patch must be limited to the security features. Nothing from sid (unstable) ever goes into woody (stable), only into sarge (testing) which is soon to become the new stable. I don't see that he implied otherwise. -- John Hasler [EMAIL PROTECTED] (John Hasler)