Re: Soliciting feedback for the GLSA-2 format

Alex Xu <[email protected]> Fri, 10 Jan 2014 10:05:33 -0500
Newsgroups gmane.linux.gentoo.security
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--JmWor9hQu6MTdOWnLXK7wwoR9Mo5D3aXf
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 10/01/14 10:02 AM, Sascha Wolf wrote:
> Hi,
>=20
> I  find  the  new  version of GLSA format very interesting, especially
> with the backdrop of the automated evaluation of vulnerabilities.
>=20
> Would  it  be  possible  to  specify  in  which branch of Gentoo, this
> program is usually installed? For example, "stable" or "unstable"?
>=20
> So you can better see if you are actively involved or not.
>=20

GLSAs are not released if all affected versions are ~arch.


--JmWor9hQu6MTdOWnLXK7wwoR9Mo5D3aXf
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQIcBAEBCAAGBQJS0AxBAAoJEOFfLQs172iqor0P/Rk2paJzSE92f0Bxmg527ONy
2cjO1EwZ6EPdvcCh84nVTzBriePN0UwfTxYAopyTjUwq4kxgq/tBKPqSoLeW5VpT
TiknMO3SJFsJrxgiNAy9qMgvYGbjN5OVPFLqXH8C3lCo6qKlc6ylqh041cIo4Te0
8UXxVwo5maHZpuBZedJ6DgfLgj1H1eVwLUD06rPp/Ltzfsd0B2eyFyulndIbomt2
ViurJ1FDY0eyctPT0pdj0L1g2h9lT/2tnpewXARQ/9FbU+TCD5cIltL23H0mAtwL
G7kwJ0AKHyoj9qxCnPEA+wqwva0vu8bUbBqFMhFQf8PsOlGWAES8uXKF4QGi7OJB
64SusgxegVBqJRVHcO2715HNK6TFAtO5IY0Eez1WVB3HxKd0CuG1w6qQPAwxIi4X
M8KAN5qZP3fszW1u6gGJoBE5AhoE7numTmdW4/zuO7ketVcMqAkqEsIelUX/nNGq
/wjBlXMKOIUrSc39eVr2ZIVuG91+bpWF/nQW/RiRwE6szEt9lkY5cCcUSeI/ks+d
/thG9skEtlu3RM6p2NPhuxhWNL8lvPVMS2pnuQ7wT5Tz0MgCtO1b543BZVuhkDYe
lPb+si8RW6Y8P8CDrpgh2IXbifyz/eOnVA5iekoEVHVOdwtWZW0nnVZMj7hWQZ58
6XH2iFKfSoRu0D7SDEuk
=pjvX
-----END PGP SIGNATURE-----

--JmWor9hQu6MTdOWnLXK7wwoR9Mo5D3aXf--