Messages in this thread | | | Date | Mon, 22 Jun 1998 11:33:33 -0700 | From | "Leonard N. Zubkoff" <> | Subject | Re: Security Audit |
| |
From: alan@lxorguk.ukuu.org.uk (Alan Cox) Date: Mon, 22 Jun 1998 19:32:50 +0100 (BST)
Every package I've fixed or merged diffs into for Red Hat they have gone to the maintainer if there is one. Often there isnt. Metamail has no maintainer and the nmh maintainers didnt seem at all interested in the holes in nmh. It varies. They _are_ going back however.
I believe the Debian policy is identical on this issue
So it sounds like what we are lacking then is a common repository for "fixed" versions of packages that are either unmaintained such as metamail or where there is no choice but to diverge from the author's version due to lack of interest in security fixes. I'd definitely like to see a single source repository for this.
Leonard
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |