Security release criterion proposal

Richard Ryniker ryniker at alum.mit.edu
Thu May 19 13:47:23 UTC 2011


>if a remote root hole is found 2 days after release, what do we do?
>(the current answer is nothing)

One can suppose a re-spin is possible, given sufficient motivation.

There already exists some informal respin activity.  For example, see:

  http://jbwillia.fedorapeople.org/


More information about the test mailing list