Javier,

Do you know if there's a definitive list of those packages which RH 
would routinely choose to do a backport fix as a first approach to bug 
fixes? 

I suspect that each situation is evaluated at the time a fix is required 
but I also suspect that the development team has a pretty good idea of 
those packages that are either going to be left to the user base to 
update as they see fit and those that require careful scrutiny due to 
issues you raised in your note.

For example, over the past few weeks several security related problems 
have been identified with several programs; cups, mysql, tcpdump, and a 
couple more I have on my list at home.  I've not seen any mention by RH 
whether or not there is any intention to fix these issues and release 
new RH packages or if the RH distributed version is even vulnerable.

I guess it would be nice to know if some of these issues are on the RH 
radar screen and their intended approach.  Perhaps there's a RH mailing 
list that better addresses these kind of issues?

Regards, Mike Klinke



>
> Also, you should note that redhat does this for several packages
> besides apache. The kernel itself is one of the most heavily modified
> packages in a redhat system.
>
> Cheers,



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to