Re: [gentoo-security] courier-imap

[Kurt Lieber]

On Fri, Mar 26, 2004 at 04:35:01PM +0100 or thereabouts, Tobias Weisserth wrote:
> Bugzilla doesn't contain A LOT OF vulnerabilities that have been
> reported to bugtraq and FD for example. I have been entering three from
> bugtraq during the last four days alone. Browsing bugzilla is not a
> solution.
>
> I will try to compile a weekly pending GLSA report for this list,
> listing all vulnerabilities that have still to be solved. I'll be

You are, of course, welcome to do this.  Just to ensure everyone has the
same expectations, however, the *only* resource the Gentoo security team
will use for new security vulnerability reports is bugs.gentoo.org.  So,
while I encourage you to put together a weekly email/forums post if you so
desire, I also encourage you to ensure all those vulnerabilities are also
entered in bugzilla.  Otherwise, they *are not* likely to be looked at by a
Gentoo dev.

--kurt