1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Proposal for backport process and policy
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proposal%20for%20backport%20process%20and%20policy&In-Reply-To=%3Ccb2ag8-111.ln1%40psd.motzarella.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="007042.html">
<LINK REL="Next" HREF="007002.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Proposal for backport process and policy</H1>
<B>blind Pete</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Proposal%20for%20backport%20process%20and%20policy&In-Reply-To=%3Ccb2ag8-111.ln1%40psd.motzarella.org%3E"
TITLE="[Mageia-dev] Proposal for backport process and policy">0123peter at gmail.com
</A><BR>
<I>Fri Jul 29 08:59:23 CEST 2011</I>
<P><UL>
<LI>Previous message: <A HREF="007042.html">[Mageia-dev] Proposal for backport process and policy
</A></li>
<LI>Next message: <A HREF="007002.html">[Mageia-dev] FTBFS: Help needed:
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7103">[ date ]</a>
<a href="thread.html#7103">[ thread ]</a>
<a href="subject.html#7103">[ subject ]</a>
<a href="author.html#7103">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>on Tue, 26 Jul 2011 17:20
in the Usenet newsgroup gmane.linux.mageia.devel
Samuel Verschelde wrote:
><i> Le mardi 26 juillet 2011 07:56:36, blind Pete a écrit :
</I>>><i> on Tue, 26 Jul 2011 08:34
</I>>><i> in the Usenet newsgroup gmane.linux.mageia.devel
</I>>><i> Samuel Verschelde wrote:
</I>>><i>
</I>>><i> [snip]
</I>>><i>
</I>>><i> > *** Old backports ***
</I>>><i> > Remove old backports when newer ones are submitted
</I>>><i> > - otherwise we let people use old bugged or plagged with security issues
</I>>><i> > packages, when they don't necessarily know that there are problems with
</I>>><i> > them - simpler choice : users have to choose between the version in
</I>>><i> > updates and the one in backports, not more
</I>>><i> > - less space on mirrors (fear wesnoth and vegastrike multiple backports
</I>>><i> > !)
</I>>><i> >
</I>>><i> > Thank you for reading.
</I>>><i> >
</I>>><i> > Best regards,
</I>>><i> >
</I>>><i> > Samuel Verschelde
</I>>><i>
</I>>><i> It is theoretically possible that there could be multiple versions with
</I>>><i> bug fixes and feature enhancements with no known security problems in any
</I>>><i> of them. FireFox appears to be almost going down that path. I think
</I>>><i> that FF 5 is just FF 4.0.3 with a silly name - please correct me if I am
</I>>><i> wrong - and 5 should obsolete 4. But I can imagine several versions
</I>>><i> existing during the life of a LTS release.
</I>>><i>
</I>>><i> The deletion criteria should be, "there is a vulnerability that that is
</I>>><i> not going to be fixed". That is usually, but not always the same as,
</I>>><i> "there is a new version".
</I>><i>
</I>><i> Are you going to check every existing backport for vulnerabilities so that we
</I>><i> can choose which versions to delete ?
</I>
No. It it requires work, that is a good reason for not doing it.
I was assuming that the packager for XYZ would be on a mailing list and
when an email arrived that said version 7 need work, then remove it.
><i> If not, I don't think this is realistic
</I>><i> to support 5 versions of the same package at the same time. Let's go with the
</I>><i> simpler approach.
</I>
If things don't work like I imagined, sorry for the noise.
Simple and trustworthy is better than complex and untrustworthy.
><i> Best regards
</I>><i>
</I>><i> Samuel Verschelde
</I>
--
Sig goes here...
blind Pete
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="007042.html">[Mageia-dev] Proposal for backport process and policy
</A></li>
<LI>Next message: <A HREF="007002.html">[Mageia-dev] FTBFS: Help needed:
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7103">[ date ]</a>
<a href="thread.html#7103">[ thread ]</a>
<a href="subject.html#7103">[ subject ]</a>
<a href="author.html#7103">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
