On 12:37 Tue 08 Feb , Rich Freeman wrote: > On Feb 8, 2011 11:44 AM, "Donnie Berkholz" <dberkh...@gentoo.org> wrote: > > (With exceptions for security issues.) > > Other than monitoring bugzilla, how does a Gentoo user even know that > they have a package pending a security update? It seems like glsa's > lag stabilization by a considerable timeframe.
I read LWN's security page and ensure updates happen, regardless of whether the ebuild exists yet. But if I didn't, I would rely on GLSAs — either via the mailing list or with a daily sync and glsa-check. -- Thanks, Donnie Donnie Berkholz Sr. Developer, Gentoo Linux Blog: http://dberkholz.com
pgpKFWCifmVrx.pgp
Description: PGP signature
