From: Leo Famulari <leo@famulari.name>
To: Danny Milosavljevic <dannym@scratchpost.org>
Cc: guix-devel <guix-devel@gnu.org>
Subject: Security updates (was Re: texmaker, Qt and Chromium)
Date: Sun, 9 Oct 2016 16:13:10 -0400 [thread overview]
Message-ID: <20161009201310.GA30105@jasmine> (raw)
In-Reply-To: <20161008105545.6154ed73@scratchpost.org>
On Sat, Oct 08, 2016 at 10:55:45AM +0200, Danny Milosavljevic wrote:
> One of the reasons I'm using distributions rather than just
> ./configure ; make ; make install is that distributors stay on top of
> security problems and disable and/or patch packages as problems arise.
> I think many others also mainly use distributions because of that.
I'm going off-topic here, but... Please Help :)
Right now there are only a few of us paying attention to security bug
disclosures and, in my opinion, that's not enough.
If you are interested in keeping Guix secure, try subscribing to the
oss-sec mailing list. If you use Guix on a foreign distro, you can
subscribe to that distro's security announcement list. If you are the de
facto maintainer of some Guix packages, or if you run your business on
some Guix packages, follow the upstream bug reports.
And then, patch bugs in our packages. If you aren't sure how to fix the
bugs, it's still helpful to present them on guix-devel and ask for
advice.
Help Wanted!
[0]
http://seclists.org/oss-sec/
[1] For example:
https://lists.debian.org/debian-security-announce/
next prev parent reply other threads:[~2016-10-09 20:13 UTC|newest]
Thread overview: 27+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-10-07 19:17 texmaker, Qt and Chromium Ricardo Wurmus
2016-10-08 8:14 ` Roel Janssen
2016-10-08 9:18 ` Ricardo Wurmus
2016-10-08 9:35 ` David Craven
2016-10-08 9:45 ` Ricardo Wurmus
2016-10-08 9:50 ` David Craven
2016-10-08 22:09 ` Leo Famulari
2016-10-08 8:21 ` John Darrington
2016-10-08 8:55 ` Danny Milosavljevic
2016-10-08 9:16 ` Ricardo Wurmus
2016-10-08 9:55 ` Danny Milosavljevic
2016-10-09 20:13 ` Leo Famulari [this message]
2016-10-09 21:07 ` Security updates (was Re: texmaker, Qt and Chromium) Kei Kebreau
2016-10-09 22:09 ` Leo Famulari
2016-10-09 21:33 ` Ludovic Courtès
2016-10-11 11:40 ` ng0
2016-10-08 9:12 ` texmaker, Qt and Chromium David Craven
2016-10-08 9:23 ` Ricardo Wurmus
2016-10-08 21:35 ` Roel Janssen
2016-10-08 21:46 ` Ricardo Wurmus
2016-10-10 10:41 ` Roel Janssen
2016-10-08 21:53 ` Danny Milosavljevic
2016-10-08 20:18 ` Efraim Flashner
2016-10-08 21:00 ` Ricardo Wurmus
2016-10-08 21:08 ` Efraim Flashner
2016-10-08 21:20 ` ng0
2016-10-08 21:24 ` Danny Milosavljevic
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20161009201310.GA30105@jasmine \
--to=leo@famulari.name \
--cc=dannym@scratchpost.org \
--cc=guix-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).