Javier, Do you know if there's a definitive list of those packages which RH would routinely choose to do a backport fix as a first approach to bug fixes?
I suspect that each situation is evaluated at the time a fix is required but I also suspect that the development team has a pretty good idea of those packages that are either going to be left to the user base to update as they see fit and those that require careful scrutiny due to issues you raised in your note. For example, over the past few weeks several security related problems have been identified with several programs; cups, mysql, tcpdump, and a couple more I have on my list at home. I've not seen any mention by RH whether or not there is any intention to fix these issues and release new RH packages or if the RH distributed version is even vulnerable. I guess it would be nice to know if some of these issues are on the RH radar screen and their intended approach. Perhaps there's a RH mailing list that better addresses these kind of issues? Regards, Mike Klinke > > Also, you should note that redhat does this for several packages > besides apache. The kernel itself is one of the most heavily modified > packages in a redhat system. > > Cheers, -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list