Gentoo Archives: gentoo-security

From: Christian Kauhaus <kc@××××××.com>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] No GLSA since January?!?
Date: Fri, 26 Aug 2011 17:08:14
Message-Id: 4E57D29B.5070603@gocept.com
In Reply to: Re: [gentoo-security] No GLSA since January?!? by Alex Legler
1 Am 26.08.2011 18:55, schrieb Alex Legler:
2 > Compared to other distributions, our advisories have been rather detailed with
3 > lots of manually researched information. I'm not sure if we can keep up this
4 > very high standard with the limited manpower, but we'll try our best.
5
6 I see the point. I think it would be an achievement over the current situation
7 (which is: no current GLSAs at all) to send out less detailed GLSAs. Even
8 something short as: "$PACKAGE has vulnerabilities, they are fixed in $VERSION,
9 for details see $CVE" would be immensely helpful.
10
11 Is the any viable way to get it at least to this point? Probably the largest
12 part of such a task could be automated. This would lift the burden from the
13 security maintainers.
14
15 Regards
16
17 Christian
18
19 --
20 Dipl.-Inf. Christian Kauhaus <>< · kc@××××××.com · systems administration
21 gocept gmbh & co. kg · forsterstraße 29 · 06112 halle (saale) · germany
22 http://gocept.com · tel +49 345 1229889 11 · fax +49 345 1229889 1
23 Zope and Plone consulting and development

Replies

Subject Author
Re: [gentoo-security] No GLSA since January?!? Joost Roeleveld <joost@××××××××.org>
Re: [gentoo-security] No GLSA since January?!? Kevin Bryan <bryank@××××××.edu>