Re: bison (Re: Owl packages with dangerous "tmp" functions)

[Solar Designer]

> >This sounds good, I am downloading the 20010103 version now, -- but
> >you aren't suggesting that we package it for distributions, are you?
> 
> I think you will have to wait for Akim Demaille, who is developing Bison,
> coming back from vacation for an answer to that.
> 
> Otherwise, I use it, and it seems to be OK. I think that the version there
> right now is stable enough.
> 
> Is your distribution local? If it is just something rather local or

There're many distribution vendors on vendor-sec@, most are definitely
not local/restricted.

> restricted, why don't you distribute it to see if people get upset, so we
> get some bug reports. :-)

The security updates shouldn't be doing anything but fixing security
problems, or people would get upset and not install security updates
in the future.

What you're saying is a valid approach to use with new releases of a
distribution, and I have a chance to do so myself (we're just going
public soon).

-- 
/sd