[cut-team] CUT thoughts

[Joey Hess]

Michael Gilbert wrote:
> Anthony Towns:
> > Running debsecan on a lenny box reports a whole bunch of security
> > vulnerabilities, including a bunch of high-urgency ones. I found one
> > that I could resolve by removing an unused library, but most of them
> > don't seem to have fixes available? Is that normal?
> 
> Yes, unfortunately that is very much the status quo wrt stable security.

Right, and this gets back to what I posted before about the common 
perception of stable being more secure than testing or unstable being
inverted from what is often the reality. If AJ gets it wrong, I guess
almost everyone is getting it wrong. :)

Which problem is something CUT can address, from the publicity angle.

-- 
see shy jo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/cut-team/attachments/20100816/7370fa9a/attachment.pgp>