From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 12183 invoked by alias); 19 Aug 2008 09:56:06 -0000 Received: (qmail 12172 invoked by uid 22791); 19 Aug 2008 09:56:05 -0000 X-Spam-Check-By: sourceware.org Received: from aquarius.hirmke.de (HELO calimero.vinschen.de) (217.91.18.234) by sourceware.org (qpsmtpd/0.31.1) with ESMTP; Tue, 19 Aug 2008 09:55:31 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 6EC1A6D434C; Tue, 19 Aug 2008 11:57:11 +0200 (CEST) Date: Tue, 19 Aug 2008 09:56:00 -0000 From: Corinna Vinschen To: cygwin-apps@cygwin.com Subject: Re: HEADSUP: Security updates outstanding Message-ID: <20080819095711.GA23793@calimero.vinschen.de> Reply-To: cygwin-apps@cygwin.com Mail-Followup-To: cygwin-apps@cygwin.com References: <48A8C9B4.7010905@users.sourceforge.net> <20080818010921.GA28585@ednor.casa.cgf.cx> <48A8E17A.2050402@users.sourceforge.net> <20080818130921.GA31691@ednor.casa.cgf.cx> <20080818132734.GJ21040@calimero.vinschen.de> <48A9C894.7000106@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <48A9C894.7000106@users.sourceforge.net> User-Agent: Mutt/1.5.16 (2007-06-09) Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com X-SW-Source: 2008-08/txt/msg00146.txt.bz2 On Aug 18 14:08, Yaakov (Cygwin Ports) wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Corinna Vinschen wrote: > > Personally I'm kind of not interested to go this road. If I learn about > > a problem in an upstream package, I update. If anybody else want's to > > take over responsibility for security problems, I certainly don't stand > > in the way, of course. > > While that seems to work for you, when applied to the entire distro > there are some pitfalls: > [...] > Having a security team and a private list would allow us to deal with > all these things responsibly. I thought that's integrated in the "I certainly don't stand in the way" part. I'm just not interested having to take over that responsibility or having to drive this process through. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat