oss-sec mailing list archives

Re: Re: linux-distros membership


From: Yves-Alexis Perez <corsac () debian org>
Date: Thu, 16 Jan 2014 22:08:37 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Thu, Jan 16, 2014 at 01:54:08PM +0100, rf () q-leap de wrote:
Hi Yves,

 >> I hope this is the right place to ask for inclusion of a Qlustar contact
 >> in the linux-distros list.
 >> 
 >> Qlustar is a Ubuntu/Debian based distro targeted at HPC/Storage/Cloud
 >> clusters. We use our own kernels (typically based on vanilla) since many
 >> years, but have the need to supply timely security fixes to our users. So
 >> far we have to wait for other distros to come out with their
 >> announcements and then start analyzing the fixes they have done. This
 >> leaves us/our users with a vulnerability window that is way too large,

I can't speak for Ubuntu, but you're welcome to participate in the
Debian security effort.

thanks a lot for your offer. Could you explain a little more what
participation in the Debian security effort would mean? Note that the issue I
currently have is mostly about kernel fixes and we don't use Debian nor
Ubuntu kernels.

Most of the documentation can be found in the secure-testing repository
[1] and on the Debian wiki [2].

[1]: http://anonscm.debian.org/viewvc/secure-testing/doc/narrative_introduction?view=markup
[2]: https://wiki.debian.org/Teams/Security

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS2EpOAAoJEG3bU/KmdcCli/IH/3sLTXrwi2qCX9+obZSqF0kt
8YWJSfMCTDSb0tibzOPlbjqVdEmb7PM22beG3j3+lBfPmcBNUOpzqtYTfhaiVF1X
K4B/E1ob9YBkTu1B9oBskm/D2zvyDanU/NeXSCaKFBntI/nkimNDpqtrmWskm/rN
zVHD/nNrZebKfiNEKdoOqPsxuSCHBKhNEh72uqkv3i34IWF3K2vQS1GZvwbka+Bd
L74ZNIBzZGAdZryQ/eaN8APJK0I+khs3h+YuOXRxvJGQrVmA3POSQHBHKMqAp+hu
UD9t3h7hIgpxhEIeMHfj/yWzcUcrjD45taSmW1lIkudvPqvMiQhyKksIPnTlMDI=
=ARH7
-----END PGP SIGNATURE-----


Current thread: