On Tue, 6 Mar 2012 19:06:46 +0000 Neil Bothwick <n...@digimed.co.uk> wrote:
> If you run testing, you usually have the fixed version before it gets > into a GLSA. IME, the same is true of running stable. I saw comments somewhere recently about the GLSA-releasing process having a bottleneck somewhere, but there weren't details. I think I was reading bugs.gentoo.org, but I'm not sure. The stabilization bug[1] for GLSA 201203-12[2] has the fix stabilized on all arches, and a GLSA request made, on 16 January but the GLSA wasn't issued until 6 March. I don't know if that's an anomaly or not. There's a lot I don't know in this post, heh. I guess I'm requesting comments. 1 https://bugs.gentoo.org/show_bug.cgi?id=397695 2 http://www.gentoo.org/security/en/glsa/glsa-201203-12.xml