Kurt Lieber wrote:
> Because we don't have enough people on-staff willing to help out with these
> types of issues.

Could you detail in what areas help is needed, so that we can evaluate 
if our profiles (free time and knowledge) can fit in ?

Tobias Weisserth wrote:
> What about the announcement item in the forums? If one GLSA does appear
> there, ALL should. If you don't maintain the security announcements in
> the forum, then scrap it. All places where security announcements are
> issued should be kept in sync under all circumstances. It's better to
> scrap one of these places then having it out of sync.

The announcement item in the forums looks in sync. And I always received 
  all GLSAs in gentoo-announce.

However I had concern recently with the latest kernel GLSA which has 
been over-delayed in my opinion. I've posted about this in this 
mailing-list so that we can discuss steps to avoid such delays in the 
future, but with no answer from the official people in charge.

There is one point where I agree with Tobias : too many GLSA diffusion 
channels might increase the potential sync problems. gentoo main page, 
forums, mailing-list(s), GLSA-test hub... I think we have to be careful 
about that.

- Koon (ready to help if time and knowledge profile is appropriate)

--
gentoo-security@g.o mailing list