[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Capire quando è il momento?



Il ven, 2004-02-20 alle 12:16, Gian Piero Carrubba ha scritto:

> Comunque sul paragrafo in questione mi riservo di chiedere ulteriori
> chiarimenti su debian-security, visto che ci sono un paio di cose per me
> non molto chiare.

Direi che questo taglia la testa al toro (Michael Stone e' membro del
DST).

-----Messaggio Inoltrato----- 
From: Michael Stone <mstone@debian.org>
To: ML Debian Security <debian-security@lists.debian.org>
Subject: Re: Some clarifications about the Debian-security-HOWTO
Date: Fri, 20 Feb 2004 08:08:08 -0500

On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote:
>But this is not always true. Sometimes the DSA reports "For the unstable
>distribution (sid) these problems will be fixed soon."
>Why this ? 

The security team has nothing to do with sid packages. If a fix is ready
when the advisory goes out the security team may add the sid information
as a curtesy, but the lack of a sid package will in no way delay the
advisory.

>Are the fixes *always* be applied to sid packages and then backported ?

That never happens, the security HOWTO should rephrase that. I imagine
that the intent is to say that sid may have a new version installed to
fix a problem, but stable will get a backported patch.

Ciao,
Gian Piero.



Reply to: