Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #4701

Re: [SECURITY] [DSA 3547-1] imagemagick security update

From Peter Palfrader <weasel@debian.org>
Newsgroups linux.debian.security
Subject Re: [SECURITY] [DSA 3547-1] imagemagick security update
Date 2016-04-12 21:50 +0200
Message-ID <rnctX-4hV-5@gated-at.bofh.it> (permalink)
References (4 earlier) <rn8A2-1cd-9@gated-at.bofh.it> <rn9Z7-2vk-1@gated-at.bofh.it> <rnas9-2MG-1@gated-at.bofh.it> <rnasa-2MG-3@gated-at.bofh.it> <rnc0V-43s-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Tue, 12 Apr 2016, Henrique de Moraes Holschuh wrote:

> We list several mirrors carrying debian security updates in
> https://www.debian.org/mirror/list-full

I think we shouldn't.

> We don't disclose which mirrors are members of the security.debian.org

https://anonscm.debian.org/cgit/mirror/dsa-auto-dns.git/tree/zones/security.debian.org.zone

is the file that the security.d.o zone is generated from.

> Alternate access URIs for several of the security.debian.org pool
> members *do* exist, but that information seems not to be clearly
> displayed anywhere.

They do?  Anything we actually tell people to use?

> A good starting point would be to provide a list of official security
> mirrors (potential members of the security.debian.org pool) that can be
> accessed directly when geo-ip is directing an user to a pool member that
> is stale.

No.  We derotate mirrors regularly for maintenance work.  We don't want
users to pick their security.d.o mirror.

-- 
                            |  .''`.       ** Debian **
      Peter Palfrader       | : :' :      The  universal
 https://www.palfrader.org/ | `. `'      Operating System
                            |   `-    https://www.debian.org/

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-12 13:40 +0200
  Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 14:00 +0200
    Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 07:40 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-13 07:50 +0200
        Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 08:20 +0200
  Re: [SECURITY] [DSA 3547-1] imagemagick security update Luciano Bello <luciano@debian.org> - 2016-04-12 14:20 +0200
    Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-12 17:10 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update Drake Wilson <drake@dasyatidae.net> - 2016-04-12 17:40 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 17:40 +0200
        Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 19:10 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-12 19:40 +0200
            Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-12 21:20 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Michael Stone <mstone@debian.org> - 2016-04-12 21:40 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 01:30 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Julien Cristau <jcristau@debian.org> - 2016-04-13 11:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 14:50 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-12 21:50 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 02:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Michael Stone <mstone@debian.org> - 2016-04-13 04:20 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-13 07:40 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 15:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:10 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-12 19:40 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 08:10 +0200
            Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-13 09:00 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Alexander Neilson <alexander@neilson.net.nz> - 2016-04-13 12:30 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:20 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 14:50 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Scott Blaydes <scott@nettek.io> - 2016-04-13 15:10 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:20 +0200

csiph-web