From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PmsjQ-00079u-FN for garchives@archives.gentoo.org; Tue, 08 Feb 2011 18:56:08 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B32DAE05F1; Tue, 8 Feb 2011 18:55:53 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 69CE4E032F for ; Tue, 8 Feb 2011 18:55:19 +0000 (UTC) Received: from gentoo.org (mayo-nat4.mayo.edu [129.176.197.23]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: dberkholz) by smtp.gentoo.org (Postfix) with ESMTPSA id D79561B405E for ; Tue, 8 Feb 2011 18:55:18 +0000 (UTC) Date: Tue, 8 Feb 2011 12:56:07 -0600 From: Donnie Berkholz To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] avoiding urgent stabilizations Message-ID: <20110208185606.GA6095@comet.mayo.edu> References: <20110207205059.GA10939@bookie> <1297165414.2669.1@NeddySeagoon> <20110208120348.GA13292@bookie.wireless.manchester.ac.uk> <20110208122235.GD28923@gentoo.org> <20110208164116.GC31166@comet.mayo.edu> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="7AUc2qLy4jB3hD7Z" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) X-Archives-Salt: X-Archives-Hash: 52d59bc8e79d1a7b926c1760615e4530 --7AUc2qLy4jB3hD7Z Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 12:37 Tue 08 Feb , Rich Freeman wrote: > On Feb 8, 2011 11:44 AM, "Donnie Berkholz" wrote: > > (With exceptions for security issues.) >=20 > Other than monitoring bugzilla, how does a Gentoo user even know that=20 > they have a package pending a security update? It seems like glsa's=20 > lag stabilization by a considerable timeframe. I read LWN's security page and ensure updates happen, regardless of=20 whether the ebuild exists yet. But if I didn't, I would rely on GLSAs =E2=80=94 either via the mailing lis= t or=20 with a daily sync and glsa-check. --=20 Thanks, Donnie Donnie Berkholz Sr. Developer, Gentoo Linux Blog: http://dberkholz.com --7AUc2qLy4jB3hD7Z Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) iEYEABECAAYFAk1RkcYACgkQXVaO67S1rtvHIACePocdEd7FOY+gBoMj4kBGFIaS h9kAn0s3Y8IV3NLF0RCgx1NOSK3aiIog =jR96 -----END PGP SIGNATURE----- --7AUc2qLy4jB3hD7Z--