Gentoo Archives: gentoo-dev

From: Mike Pagano <mpagano@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] Gentoo-sources - should we stable?
Date: Fri, 02 Jan 2015 17:26:01
Message-Id: 6177743.0yyzHrgsfX@crow
1 Hello, Everyone,
2
3 Are there solid arguments for stabilizing any version of gentoo-sources? I
4 think the valid arguments for not stabilizing gentoo-sources can be garnered
5 from the thread about not stabilizing vanilla-sources[1].
6
7 This is in no way complaining about how long it takes to stabilize a kernel.
8 It's just a fact that by the time we do stabilizing one, there might be many,
9 many kernel versions released for that 3.X branch that contains security fixes
10 for which the stable version will not have. Kernel versions are coming out
11 1-2 a week at this point.
12
13 I feel we are giving users a false sense of security, and maybe it would be
14 better for them to upgrade faster than they are doing now if they are only
15 using stable kernels.
16
17 Having stable kernels around keeps me from deleting these old, potentially
18 vulnerable releases.[2]
19
20 Mike
21
22 [1] http://marc.info/?l=gentoo-kernel&m=137182668616082&w=2
23 [2] http://packages.gentoo.org/package/sys-kernel/gentoo-sources
24
25
26 --
27 Mike Pagano
28 Gentoo Developer - Kernel Project
29 Team Lead - Gentoo Sources
30 E-Mail : mpagano@g.o
31 GnuPG FP : EEE2 601D 0763 B60F 848C 9E14 3C33 C650 B576 E4E3
32 Public Key : http://pgp.mit.edu:11371/pks/lookup?search=0xB576E4E3&op=index

Replies