YUM security issues...

[Mike McGrath]

On Fri, 25 Jul 2008, Josh Bressers wrote:

> On 21 July 2008, Josh Bressers wrote:
> > On 19 July 2008, "Justin Cappos" wrote:
> > >
> > > By the way, did you remove the ability for mirror admins to select a
> > > subnet where they'll serve all of the traffic?   We're particularly
> > > concerned about this issue in the short term.   We took our mirror
> > > down (mirror1.lockdownhosting.com) quite a while ago so we can't check
> > > for ourselves.
> > >
> >
> > I don't know the answer to this, so I'm adding the Fedora Infrastructure
> > list to the CC.
> >
> > For you Fedora Infrastructure guys, this is regarding this paper:
> > http://www.cs.arizona.edu/people/justin/packagemanagersecurity/
> >
> > Thanks.
> >
>
> Sadly I'm resending this.  The Fedora Infrastructure group doesn't have
> their act together, so my original message is stuck in a moderator queue
> nobody has the password for.  I've subscribed to the list for the purpose
> of sending this mail.
>
> Can someone respond to the above question from Justin.
>

Wow, what a nice way to ask for help.  One wonders why you didn't just
file a bug or contact admin at fedoraproject.org.

https://fedorahosted.org/fedora-infrastructure/

Side note, I'm still waiting on RHIT to email me a password for the list.

	-Mike