[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security in testing



* Steve Kemp 

| On Fri, May 16, 2003 at 01:39:20PM -0400, Matt Zimmerman wrote:
| 
| > > If a member of the sec-team says "Yes, we are actively trying to
| > > find
| > > new members, but finding competent and responsive people who have
| > > the
| > > time and will to help is very difficult", then I'm happy and shut
| > > up.
| >
| > Well, then. :-)
| 
|   Every time I get a few spare hours I glance over list of packages
|  needing work, and tagged security:
| 
|  		http://qa.debian.org/bts-security.html
| 
|   Of the packages listed there 23 out of the 147 entries contain
|  patches, (some of these patches may well be bogus).
| 
|   So it seems like a simple matter to apply and rebuild them, short
|  of performing an NMU it seems that there's little a random developer
|  could do.

_And test them_.  If you have done that and a bug hasn't been tended
to, an NMU is just fine.  A mail to the maintainer is also a good
idea.

-- 
Tollef Fog Heen                                                        ,''`.
UNIX is user friendly, it's just picky about who its friends are      : :' :
                                                                      `. `' 
                                                                        `-  



Reply to: