List Archive: gentoo-security
Note: Due to technical difficulties, the Archives are currently not up to date.
provides an alternative service for most mailing lists.c.f. bug 424647
Kurt Lieber wrote:
> Because we don't have enough people on-staff willing to help out with these
> types of issues.
Could you detail in what areas help is needed, so that we can evaluate
if our profiles (free time and knowledge) can fit in ?
Tobias Weisserth wrote:
> What about the announcement item in the forums? If one GLSA does appear
> there, ALL should. If you don't maintain the security announcements in
> the forum, then scrap it. All places where security announcements are
> issued should be kept in sync under all circumstances. It's better to
> scrap one of these places then having it out of sync.
The announcement item in the forums looks in sync. And I always received
all GLSAs in gentoo-announce.
However I had concern recently with the latest kernel GLSA which has
been over-delayed in my opinion. I've posted about this in this
mailing-list so that we can discuss steps to avoid such delays in the
future, but with no answer from the official people in charge.
There is one point where I agree with Tobias : too many GLSA diffusion
channels might increase the potential sync problems. gentoo main page,
forums, mailing-list(s), GLSA-test hub... I think we have to be careful
- Koon (ready to help if time and knowledge profile is appropriate)
firstname.lastname@example.org mailing list