oss-sec mailing list archives

Re: Contributing Back


From: Anthony Liguori <anthony () codemonkey ws>
Date: Mon, 15 Jul 2019 11:54:23 -0700

On Mon, Jul 15, 2019 at 11:47 AM Joe McManus <joe.mcmanus () canonical com> wrote:

Hey Alexander-

On Sun, Jul 14, 2019 at 11:45 AM Solar Designer <solar () openwall com> wrote:

Hi Joe,

On Tue, Jul 09, 2019 at 07:00:36PM -0600, Joe McManus wrote:
Hey All - The Ubuntu Security Team would like to sign up for items 3,4
& 5 from the technical list <
https://oss-security.openwall.org/wiki/mailing-lists/distros#contributing-back
:

3 - Review and/or test the proposed patches and point out potential issues
  with them [...]
4 - Check if related issues exist in the same piece of software [...]
5 - Check if related issues exist in implementations of similar
  functionality in other software [...]

Please let me know how we get started helping out.

This will be much appreciated, thanks!

Will this be taken care of by Ubuntu Security Team members who are
already on linux-distros (highly preferable) or will we need to
subscribe more people just for these roles (would be non-ideal)?

For 3, do you prefer to be "primary" or "backup"?  (We already have
Amazon listed as "primary", but as discussed Amazon is yet to become
more active in this role.)

Will you personally be involved?  What's your role with the Ubuntu
Security Team?

I notice you don't appear to be on oss-security, so am copying this
reply to you and to the list.

Thanks again,

Alexander

Yes, this will be taken care of by Ubuntu Security Team members who
are already on the list, however if after some time we need to cycle
someone in or out I might come asking. I know you don't want to add
anyone so we will do our best to prevent this from happening.

For 3 we can be either primary or backup, just let me know your
preference and we'll do the work.

I would be happy for y'all to be primary.  We don't ship as many
packages as Ubuntu does so there will be more things that you are
likely to test compared to what we do.

Regards,

Anthony Liguori


Current thread: