Re: Bug#176178: handling open security problems in woody with the BTS (here: the kernel)[was: Re: Bug#176178 acknowledged by developer (do not reopen)]
On Mon, Apr 07, 2003 at 08:23:54AM +1000, Herbert Xu wrote:
> Mark Brown <firstname.lastname@example.org> wrote:
> > Putting the fix into proposed-updates doesn't seem like enough - unlike
> > security-updates we don't recommend that users install packages from
> Some may argue that this helps the user to see what the status is. But
> surely the user can just look at the www.debian.org home page and find
> all the DSAs in one place.
If there were a DSA then there would be packages in security-updates so
proposed-updates wouldn't be a problem. Normally bug reports and
questions of this nature take the form "I saw this security alert but
can't see a relevant DSA.".
"You grabbed my hand and we fell into it, like a daydream - or a fever."