Re: Sid and security

2004-08-21 Thread John Hasler
Oliver Elphick writes: > The patch must be limited to the security features. > Nothing from sid (unstable) ever goes into woody (stable), only into > sarge (testing) which is soon to become the new stable. I don't see that he implied otherwise. -- John Hasler [EMAIL PROTECTED] (John Hasler) Danc

Re: Sid and security

2004-08-21 Thread Stefan O'Rear
On Sat, Aug 21, 2004 at 12:27:21PM -0500, John Hasler wrote: > Someone finds hole and notifies maintainer and/or security team. > Security is notified if they don't know already. > Maintainer is notified if he doesn't know already. > Security team and/or maintainer fixes hole. > Security team NMU's

Re: Sid and security

2004-08-21 Thread John Hasler
Stefan O'Rear writes: > Security team finds hole. > Security team fixes hole. > Security team NMU's woody-proposed-updates > Security team contacts maintainer. > Maintainer applies patch. > Maintainer uploads to sid. Someone finds hole and notifies maintainer and/or security team. Security is noti

Re: Sid and security

2004-08-21 Thread Oliver Elphick
On Sat, 2004-08-21 at 16:42, Stefan O'Rear wrote: > Please correct me if I'm misunderstanding all this... > > Security team finds hole. > Security team fixes hole. > Security team NMU's woody-proposed-updates (exactly what section doesn't > really matter

Re: Sid and security

2004-08-21 Thread Stefan O'Rear
On Sat, Aug 21, 2004 at 04:32:41PM +0100, Oliver Elphick wrote: > On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > I note that when the Sarge installer created my sources.list file, it put a > > line in as follows: > > > >

Re: Sid and security

2004-08-21 Thread Michael Satterwhite
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 21 August 2004 10:32, Oliver Elphick wrote: > On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > I note that when the Sarge installer created my sources.list file, it put >

Re: Sid and security

2004-08-21 Thread Oliver Elphick
On Sat, 2004-08-21 at 16:25, Michael Satterwhite wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I note that when the Sarge installer created my sources.list file, it put a > line in as follows: > > deb http://security.debian.org/ testing/updates main ... > Question: Am I corr

Sid and security

2004-08-21 Thread Michael Satterwhite
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I note that when the Sarge installer created my sources.list file, it put a line in as follows: deb http://security.debian.org/ testing/updates main The documentation page implies that a similar location exists for all the distributions, bu