FOLKS: PLEASE HELP US OUT!!
Chen, (and anyone reading this): you can help us by opening Legacy
Bugzilla reports on security issues that you are concerned with or
know about.
Bugzilla is the tracking system that we use to track security issues with
our packages, from initial awareness of the issue to creating test RPM pack-
ages, doing testing/QA'ing on source and binary packages, to releasing pack-
ages to Legacy's official updates, which your yum updates can pick them up
from. A fairly decent Bugzilla ticket to look at that illustrates the
process is here:
<https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189672>.
There is an old saying, "If it's not in Bugzilla, it's not a bug." Those
of us who work with building and testing packages are not aware of issues
until they're entered there or mentioned here on this list. We can use
as much help as we can get, and opening Bugzilla's is a pretty easy way
to help us out.