summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-dev/2011-July/007103.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-dev/2011-July/007103.html')
-rw-r--r--zarb-ml/mageia-dev/2011-July/007103.html119
1 files changed, 119 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2011-July/007103.html b/zarb-ml/mageia-dev/2011-July/007103.html
new file mode 100644
index 000000000..5e489343a
--- /dev/null
+++ b/zarb-ml/mageia-dev/2011-July/007103.html
@@ -0,0 +1,119 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-dev] Proposal for backport process and policy
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proposal%20for%20backport%20process%20and%20policy&In-Reply-To=%3Ccb2ag8-111.ln1%40psd.motzarella.org%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007042.html">
+ <LINK REL="Next" HREF="007002.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-dev] Proposal for backport process and policy</H1>
+ <B>blind Pete</B>
+ <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proposal%20for%20backport%20process%20and%20policy&In-Reply-To=%3Ccb2ag8-111.ln1%40psd.motzarella.org%3E"
+ TITLE="[Mageia-dev] Proposal for backport process and policy">0123peter at gmail.com
+ </A><BR>
+ <I>Fri Jul 29 08:59:23 CEST 2011</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007042.html">[Mageia-dev] Proposal for backport process and policy
+</A></li>
+ <LI>Next message: <A HREF="007002.html">[Mageia-dev] FTBFS: Help needed:
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7103">[ date ]</a>
+ <a href="thread.html#7103">[ thread ]</a>
+ <a href="subject.html#7103">[ subject ]</a>
+ <a href="author.html#7103">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>on Tue, 26 Jul 2011 17:20
+in the Usenet newsgroup gmane.linux.mageia.devel
+Samuel Verschelde wrote:
+
+&gt;<i> Le mardi 26 juillet 2011 07:56:36, blind Pete a &#233;crit :
+</I>&gt;&gt;<i> on Tue, 26 Jul 2011 08:34
+</I>&gt;&gt;<i> in the Usenet newsgroup gmane.linux.mageia.devel
+</I>&gt;&gt;<i> Samuel Verschelde wrote:
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> [snip]
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> &gt; *** Old backports ***
+</I>&gt;&gt;<i> &gt; Remove old backports when newer ones are submitted
+</I>&gt;&gt;<i> &gt; - otherwise we let people use old bugged or plagged with security issues
+</I>&gt;&gt;<i> &gt; packages, when they don't necessarily know that there are problems with
+</I>&gt;&gt;<i> &gt; them - simpler choice : users have to choose between the version in
+</I>&gt;&gt;<i> &gt; updates and the one in backports, not more
+</I>&gt;&gt;<i> &gt; - less space on mirrors (fear wesnoth and vegastrike multiple backports
+</I>&gt;&gt;<i> &gt; !)
+</I>&gt;&gt;<i> &gt;
+</I>&gt;&gt;<i> &gt; Thank you for reading.
+</I>&gt;&gt;<i> &gt;
+</I>&gt;&gt;<i> &gt; Best regards,
+</I>&gt;&gt;<i> &gt;
+</I>&gt;&gt;<i> &gt; Samuel Verschelde
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> It is theoretically possible that there could be multiple versions with
+</I>&gt;&gt;<i> bug fixes and feature enhancements with no known security problems in any
+</I>&gt;&gt;<i> of them. FireFox appears to be almost going down that path. I think
+</I>&gt;&gt;<i> that FF 5 is just FF 4.0.3 with a silly name - please correct me if I am
+</I>&gt;&gt;<i> wrong - and 5 should obsolete 4. But I can imagine several versions
+</I>&gt;&gt;<i> existing during the life of a LTS release.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> The deletion criteria should be, &quot;there is a vulnerability that that is
+</I>&gt;&gt;<i> not going to be fixed&quot;. That is usually, but not always the same as,
+</I>&gt;&gt;<i> &quot;there is a new version&quot;.
+</I>&gt;<i>
+</I>&gt;<i> Are you going to check every existing backport for vulnerabilities so that we
+</I>&gt;<i> can choose which versions to delete ?
+</I>
+No. It it requires work, that is a good reason for not doing it.
+
+I was assuming that the packager for XYZ would be on a mailing list and
+when an email arrived that said version 7 need work, then remove it.
+
+&gt;<i> If not, I don't think this is realistic
+</I>&gt;<i> to support 5 versions of the same package at the same time. Let's go with the
+</I>&gt;<i> simpler approach.
+</I>
+If things don't work like I imagined, sorry for the noise.
+
+Simple and trustworthy is better than complex and untrustworthy.
+
+&gt;<i> Best regards
+</I>&gt;<i>
+</I>&gt;<i> Samuel Verschelde
+</I>
+--
+Sig goes here...
+blind Pete
+
+</PRE>
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007042.html">[Mageia-dev] Proposal for backport process and policy
+</A></li>
+ <LI>Next message: <A HREF="007002.html">[Mageia-dev] FTBFS: Help needed:
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7103">[ date ]</a>
+ <a href="thread.html#7103">[ thread ]</a>
+ <a href="subject.html#7103">[ subject ]</a>
+ <a href="author.html#7103">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
+mailing list</a><br>
+</body></html>