From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 19932 invoked by uid 1002); 23 Aug 2003 12:02:21 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 6584 invoked from network); 23 Aug 2003 12:02:21 -0000 From: Karsten Schulz To: gentoo-dev@gentoo.org Date: Sat, 23 Aug 2003 14:02:20 +0200 User-Agent: KMail/1.5.2 References: <20030822191939.36400b90.genone@genone.de> <200308222150.15259.kaschu@t800.ping.de> <20030823075829.37410020.genone@genone.de> In-Reply-To: <20030823075829.37410020.genone@genone.de> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200308231402.20336.kaschu@t800.ping.de> Subject: Re: [gentoo-dev] GLEP #14: security updates based on GLSA X-Archives-Salt: 7cac00c8-a515-4018-bd4e-3d3a3c0d11a1 X-Archives-Hash: 47c0f2b38991547d89f2f8a76d752fa2 Am Samstag, 23. August 2003 07:58 schrieb Marius Mauch: > Well, I've taken that from the existing GLSA format, it is currently > not used by my code. I've no real opinion on that, someone from the > security team (aliz, solar ?) should decide that. I would really like to hear from the security people what they think. > > communication works (Who creates and checks GLSAs, which public > > keys are used, a.s.o.) > > Well, I think that's outside of the scope of this GLEP. ack. > I don't like the idea of GLSAs being used for that, a simple status > update email on gentoo-security should do the job (again, that's > outside the scope of this GLEP). As I understand GLSAs (Gentoo Linux Security Announcements), they should be used to announce security related information. I cannot find a source, where they are defined to deliver fixes in any case. Again, we need information from the Gentoo security experts to make this point clear, I think. > The DTD does not require the tag to contain a tag, > so the special value none is not necessary. ok, I see! Karsten -- gentoo-dev@gentoo.org mailing list