Re: Some clarifications about the Debian-security-HOWTO

2004-03-03 Thread Javier Fernández-Sanguino Peña
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > From > http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 I've rewritten that in the CVS version, should be available in the website soon. Please review it in a few days. Regards Javier

Re: Some clarifications about the Debian-security-HOWTO

2004-03-03 Thread Javier Fernández-Sanguino Peña
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > From > http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 I've rewritten that in the CVS version, should be available in the website soon. Please review it in a few days. Regards Javier -- To UNSU

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Daniel Kobras
On Sat, Feb 21, 2004 at 09:09:24AM +0100, Adrian 'Dagurashibanipal' von Bidder wrote: > ... and sometimes people forget to leave urgency at 'high' until the fix is > really in testing when they upload a new version. Doesn't make a difference. The testing scripts take into account the maximum urg

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Daniel Kobras
On Sat, Feb 21, 2004 at 09:09:24AM +0100, Adrian 'Dagurashibanipal' von Bidder wrote: > ... and sometimes people forget to leave urgency at 'high' until the fix is > really in testing when they upload a new version. Doesn't make a difference. The testing scripts take into account the maximum urge

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Adrian 'Dagurashibanipal' von Bidder
On Saturday 21 February 2004 01.14, Matt Zimmerman wrote: > On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > > Uploads that fix a security hole should have the priority set to high, > > and this should reduce the transition delay to less than a week [1], > > shouldn't it? > >

Re: Some clarifications about the Debian-security-HOWTO

2004-02-21 Thread Adrian 'Dagurashibanipal' von Bidder
On Saturday 21 February 2004 01.14, Matt Zimmerman wrote: > On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > > Uploads that fix a security hole should have the priority set to high, > > and this should reduce the transition delay to less than a week [1], > > shouldn't it? > >

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Matt Zimmerman
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > From > http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 > > > When a security fix is prepared, packages are prepared for unstable > > and the patch is back ported to stable (since stable is usually so

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Matt Zimmerman
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: > From > http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s9.1.6 > > > When a security fix is prepared, packages are prepared for unstable > > and the patch is back ported to stable (since stable is usually so

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Michael Stone
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: But this is not always true. Sometimes the DSA reports "For the unstable distribution (sid) these problems will be fixed soon." Why this ? The security team has nothing to do with sid packages. If a fix is ready when the advi

Re: Some clarifications about the Debian-security-HOWTO

2004-02-20 Thread Michael Stone
On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote: But this is not always true. Sometimes the DSA reports "For the unstable distribution (sid) these problems will be fixed soon." Why this ? The security team has nothing to do with sid packages. If a fix is ready when the advisory