On Fri, 2008-10-10 at 00:55 +0100, Ciaran McCreesh wrote:
> On Thu, 9 Oct 2008 16:38:56 -0700
> Brian Harring <ferringb@...> wrote:
> > Of that 308, number of ebuilds that either inherit java-utils (which 
> > adds src_prepare), define their own src_prepare, or even *match* 
> > default via grepping in the ebuild is 20.
> 
> Of those, and those in overlays, and those that are going to be
> committed over the next few weeks, how many use src_prepare to apply
> security related patches?

A round zero. Security patches are going stable soon after entering
portage tree, and EAPI=2 ebuilds can not go stable yet, as there is no
package manager supporting EAPI=2 that is going to be stable in the next
week or two (so maintainers make sure they don't use EAPI=2 for security
fix revisions).
And if the bug is there and properly filed to the appropriate bugzilla,
they wouldn't go stable before that bug is fixed (which I read are
already fixed).
I can not understand why this is dragged on. It was a bug, it is fixed.
The sky is not falling and EAPI-2 is not broken - there was a bug in the
implementation that is fixed.


-- 
Mart Raudsepp
Gentoo Developer
Mail: leio@g.o
Weblog: http://planet.gentoo.org/developers/leio