Round-up, 2004-11-28

Mon Nov 29 13:17:47 UTC 2004

On Mon, 2004-11-29 at 09:34 +0000, Mark Scott wrote:
> Is there some kind of policy on when an update gets merged in with another?
> If this continues to happen it can *really* delay the previous fixes. Bug
> 2148 has been open since 11th October, which means there has been nearly 2
> months with webservers running an insecure httpd.

I don't think there is an official policy, but if packages already have
some QA done on them, opening a new bug for newer issues is the best
idea. Bug 2148 still needs a rh73 VERIFY for it to get pushed to
official updates and then the other vulnerability can be addressed.

Marc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20041129/d288af0a/attachment.sig>