Re: [suse-security] Why no SuSE RPMs for KDE 3.1.4 security update?

[Roman Drahtmueller <draht@xxxxxxx>]

> 
> Hi all,
> Re: http://www.securitytracker.com/alerts/2003/Sep/1007721.html
> There is still no security advisory from SuSE, and no KDE 3.1.4 RPMs.

Right.
So yes, you're vulnerable if you're using pam_krb5. Most people don't.

> Does SuSE expect me to compile KDE from source?
> 
> Normally SuSE is very quick with advisories and security updates. This time, 
> it is making think seriously about switching to Red Hat, or at least not 
> buying SuSE 9.0. If SuSE is delaying KDe 3.1.4 because of the effort being 
> put into SuSE 9.0, this tactic is backfiring.
> 
> To SuSE: please keep up to date with security advisories. This is the main 
> reason I have been buying your boxed distributions.

Acknowleged. We're doing our best. This one just takes a bit time.

> Thanks

Thanks,
Roman.
-- 
 -                                                                   -
| Roman Drahtmüller      <draht@xxxxxxx> //      Nail here            |
  SuSE Linux AG - Security       Phone: //       for a new            
| Nürnberg, Germany     +49-911-740530 //        monitor!     --> [x] |
 -                                                                   -

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here