Devin Naquin <dnaquin@cox.net> writes:
yep. the gentoo-security list is for discussion. Announce is the
authoritative archive of GLSAs
>> Do you know if there's a mailing list for security patches for them?
>
> gentoo-announce General Gentoo Linux announcements list (new releases, security fixes)
>
> http://www.gentoo.org/main/en/lists.xml
>
> It gives me a message of something along the lines of:
> with more detailed information following.
>
> - - ---------------------------------------------------------------------
> GENTOO LINUX SECURITY ANNOUNCEMENT 200304-05.1
> - - ---------------------------------------------------------------------
>
> PACKAGE : kde-2.x
> SUMMARY : aribitrary code execution
> DATE : 2003-04-14 09:43 UTC
> EXPLOIT : remote
> VERSIONS AFFECTED : <kdebase-2.2.2-r5, <kdelibs-2.2.2a-r2
> <kdegraphics-2.2.2-r2
> FIXED VERSION : >=kdebase-2.2.2-r5, >=kdelibs-2.2.2a-r2
> >=kdegraphics-2.2.2-r2
> CVE :
>
> - - ---------------------------------------------------------------------
>
> SOLUTION
>
> It is recommended that all Gentoo Linux users who are running
> kde-base/kde upgrade to fixed packages as follows:
>
> emerge sync
> emerge \=kde-base/kdebase-2.2.2-r5
> emerge \=kde-base/kdelibs-2.2.2a-r2
> emerge \=kde-base/kdegraphics-2.2.2-r2
> emerge clean
> ___________________
> Nolug mailing list
> nolug@nolug.org
-- Scott Harney<scotth@scottharney.com> "...and one script to rule them all." gpg key fingerprint=7125 0BD3 8EC4 08D7 321D CEE9 F024 7DA6 0BC7 94E5
___________________
Nolug mailing list
nolug@nolug.org
This archive was generated by hypermail 2.2.0 : 12/19/08 EST