Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 16 Jan 2014 22:08:37 +0100
From: Yves-Alexis Perez <corsac@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: Re: linux-distros membership

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Thu, Jan 16, 2014 at 01:54:08PM +0100, rf@...eap.de wrote:
> Hi Yves,
> 
>  >> I hope this is the right place to ask for inclusion of a Qlustar contact
>  >> in the linux-distros list.
>  >> 
>  >> Qlustar is a Ubuntu/Debian based distro targeted at HPC/Storage/Cloud
>  >> clusters. We use our own kernels (typically based on vanilla) since many
>  >> years, but have the need to supply timely security fixes to our users. So
>  >> far we have to wait for other distros to come out with their
>  >> announcements and then start analyzing the fixes they have done. This
>  >> leaves us/our users with a vulnerability window that is way too large,
> 
> > I can't speak for Ubuntu, but you're welcome to participate in the
> > Debian security effort.
> 
> thanks a lot for your offer. Could you explain a little more what
> participation in the Debian security effort would mean? Note that the issue I
> currently have is mostly about kernel fixes and we don't use Debian nor
> Ubuntu kernels.

Most of the documentation can be found in the secure-testing repository
[1] and on the Debian wiki [2].

[1]: http://anonscm.debian.org/viewvc/secure-testing/doc/narrative_introduction?view=markup
[2]: https://wiki.debian.org/Teams/Security

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS2EpOAAoJEG3bU/KmdcCli/IH/3sLTXrwi2qCX9+obZSqF0kt
8YWJSfMCTDSb0tibzOPlbjqVdEmb7PM22beG3j3+lBfPmcBNUOpzqtYTfhaiVF1X
K4B/E1ob9YBkTu1B9oBskm/D2zvyDanU/NeXSCaKFBntI/nkimNDpqtrmWskm/rN
zVHD/nNrZebKfiNEKdoOqPsxuSCHBKhNEh72uqkv3i34IWF3K2vQS1GZvwbka+Bd
L74ZNIBzZGAdZryQ/eaN8APJK0I+khs3h+YuOXRxvJGQrVmA3POSQHBHKMqAp+hu
UD9t3h7hIgpxhEIeMHfj/yWzcUcrjD45taSmW1lIkudvPqvMiQhyKksIPnTlMDI=
=ARH7
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.