[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#648595: Debian Security Audit Team status



On Fri, Nov 18, 2011 at 11:33:01AM -0800, Don Armstrong wrote:
> Is anything under http://www.debian.org/security/audit/ still
> relevant? [I'm asking because of #648595.]

Yes, most under the audit/ dir is still relevant. Although:

- The "old" infrastructure provided by Steve Kemp is no longer available 

- The project itself is stalled, and its previous members are no longer
  actively working on it

I suggest we should keep it since a new group could be formed and the goals
and past achievements stated in the audit/ web pages are relevant.

Maybe we could highlight, however, that the audit effort is stalled. I sent
my last audit report on a vulnerability may 2009 (which I just noticed is
still unfixed), but the last information from the mailing list is from 2008
IIRC.

> Alternatively, is there a contact list which should be used instead of
> the shellcode list?

I'm going to ask the listmasters for a new mailing list. In the meantime, 
for lack of a proper contact list I have changed the FAQ to point to the
debian-security mailing list and will switch back when the new list is
available.

Regards

Javier

Attachment: signature.asc
Description: Digital signature


Reply to: