Gentoo Archives: gentoo-dev

From: Luis Francisco Araujo <araujo@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] guidline to set a timeline of removal of ebuild from stable tree
Date: Tue, 12 Jun 2007 16:13:48
Message-Id: 466EC43C.7090107@gentoo.org
In Reply to: Re: [gentoo-dev] guidline to set a timeline of removal of ebuild from stable tree by cilly
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 cilly wrote:
5 > On Jun 12, 2007, at 12:46 PM, Fernando J. Pereda wrote:
6 >
7 >> Known to be buggy versions.
8 >
9 > Of course, there are bugs in every version. Sometimes a user must be
10 > able to choose which bug is more problematic, i.e. the bug in the newer
11 > ebuild which makes the package unusable for them or the older bug which
12 > has a security issue the users are aware of but not present, i.e.
13 > prevented by firewall. A timeline of two weeks would allow the user to
14 > easily downgrade and if necessary put the ebuild in overlay.
15
16 Hello,
17
18 We (developers) won't immediately remove old packages versions if there
19 is no a good reason for it, at least in my case.
20
21 One of the main motivation for fast removal are security concerns, they
22 sometimes happen and they don't even get into our bugzilla database ,
23 but the maintainer of the package is aware of it from upstream reports,
24 so these might be "unknown" problems for our users.
25
26 Best recommendation is that you trust the package maintainer and report
27 bugs in the new packages if you find them.
28
29 Regards,
30
31 - --
32
33 Luis F. Araujo "araujo at gentoo.org"
34 Gentoo Linux
35
36 -----BEGIN PGP SIGNATURE-----
37 Version: GnuPG v2.0.4 (GNU/Linux)
38
39 iD8DBQFGbsQ8aTNpke9pJcURAugPAJ9MuOmIFMzNNAx7DqKCm/ZuxLj5mACfcOf/
40 W3oxNo4aXWZLGlT9D5HblQ4=
41 =GLS5
42 -----END PGP SIGNATURE-----
43 --
44 gentoo-dev@g.o mailing list