1 |
On Tue, 17 Aug 2010 10:46:10 +0400, Peter Volkov <pva@g.o> wrote: |
2 |
|
3 |
> В Пнд, 16/08/2010 в 18:04 +0000, Alexey Shvetsov (alexxy) пишет: |
4 |
> > alexxy 10/08/16 18:04:52 |
5 |
> > |
6 |
> > Modified: ChangeLog |
7 |
> > Added: drupal-5.23.ebuild drupal-6.19.ebuild |
8 |
> > Removed: drupal-6.16.ebuild drupal-6.17.ebuild |
9 |
> > drupal-5.22.ebuild |
10 |
> > Log: |
11 |
> > [www-apps/drupal] Version bump |
12 |
> |
13 |
> Always reference bug number and mention people that spent time |
14 |
> reporting problems in our bugzilla. Please, add bug # and attribution |
15 |
> into ChangeLog. Also with version bump it's always good idea to keep |
16 |
> previous version to allow re-installation of previous versions in the |
17 |
> case of regressions. |
18 |
> |
19 |
> https://bugs.gentoo.org/show_bug.cgi?id=323399 |
20 |
> |
21 |
|
22 |
That's rather https://bugs.gentoo.org/show_bug.cgi?id=332541 |
23 |
|
24 |
I agree that the bug # should be referenced, but as for removing the |
25 |
old versions, that's something we usually ask people to do after |
26 |
bumping packages with security issues to minimize the risk of people |
27 |
installing possibly vulnerable versions. |
28 |
|
29 |
-- |
30 |
Alex Legler | Gentoo Security / Ruby |
31 |
a3li@g.o | a3li@××××××××××.de |