On Fri, May 09, 2003 at 08:34:16PM +0200, tomas pospisek wrote: > > Packages that have security relevant bugs in testing could be kicked > ___immediately___ out of testing. What do people think? That wouldn't help anything. People would have already installed the vulnerable package. apt-get wouldn't remove it from their systems just 'cause it's no longer available in the archive. The only people that would be helped by this are people who upgrade from a safe version the package (thus, a security patched stable system, most likely) after the vulnerability has been discovered. That's likely to be a very very rare case. noah -- _______________________________________________________ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html
Attachment:
pgput7bSoTehs.pgp
Description: PGP signature