Re: Mandrake & CERT advisories

From: Kevin (nobody@tex.kom)
Date: 03/05/03 

From: nobody@tex.kom (Kevin)
Date: Wed, 05 Mar 2003 17:52:46 GMT

In article <3e65ff6a$0$438$45beb828@newscene.com>,
 "George Burns" <adr@lanline.com> writes:
> send an email to security@linux-mandrake.com with subscribe in the subject
> line. They are very proactive in announcing vulnerabilities and patches to
> their user community. For example,the latest announce [MDKSA-2003:028 -
> Updated sendmail packages fix remotely exploitable buffer overflow
> vulnerability] cites all the standard references:
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1337
> http://www.kb.cert.org/vuls/id/398025
> http://www.cert.org/advisories/CA-2003-07.html
> and please read carefully before applying any patches. They tend to have
> very specific procedures.

Actually, I'm on the Mandrake security announcement list,
and I'm happy with what I see on it, the fixes, etc. I was
just wondering why I _no_longer_ see Mandrake in the CERT
announcements. I think I used to see them in there at times, but
I haven't for a very long time.

Cheerio.... 

-- 
Unless otherwise noted, the statements herein reflect my personal
opinions and not those of any organization with which I may be affiliated.
Quantcast