Scott Kitterman: As I've written, honestly no offense meant. And I'm no clamav user at all, I'm reporting just *any* issue for *any* package that comes to my knowlegde from security mailing lists and other sources, as available time permits. Most packages which I open bug reports for I've never used or even installed. Since I have a very rare amount of free time to contribute to Ubuntu, fixing packages myself is beyond my ablilities, and this won't change soon. Since I favor stableness and security, I try to make my little contribution with bug reporting. I'm always learning in this process and sometimes get useful advise how to do better, which I gladly adhere to.
I'm well aware that packages from universe aren't treated in the same way like the officially supported ones, but I'd really like to see the same care security-wise for universe as much as possible. Ubuntu is on the rise, and it doesn't need bad press like in "Ubuntu is insecure because the most part of their packages won't receive security support after release." I would never blame anybody, but I'd like to point out deficiencies if they occur to me, only to help to improve quality, not to offend anyone. I just think that a fire-and-forget-approach (means "release-and-don't -care-anymore" - slightly exaggerated of course ;-) ) is not the right thing regarding users (=target audience) of the stable releases. I'd like to see LTS releases as LTS in a whole, not just for the fraction that is supported from Canonical. Kind of a "I have a dream" thing... So I hope I could clear up my motivation to bug reporting a bit. And again, I didn't want to and won't willingly offend anybody. Please take my apologies, Scott. -- [clamav] several open CVE issues https://bugs.launchpad.net/bugs/227327 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
