Gentoo Archives: gentoo-project

From: William Hubbs <williamh@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Call for agenda items - Council meeting 2013-09-10
Date: Thu, 29 Aug 2013 20:03:52
Message-Id: 20130829200338.GA5780@linux1
In Reply to: Re: [gentoo-project] Call for agenda items - Council meeting 2013-09-10 by Ben de Groot
1 All, I'm responding to this particular message because I think there is
2 another sub-thread we should think about.
3
4 On Thu, Aug 29, 2013 at 09:16:03PM +0800, Ben de Groot wrote:
5 > On 29 August 2013 14:09, Michael Weber <xmw@g.o> wrote:
6 > > On 08/28/2013 01:15 PM, Markos Chandras wrote:
7 > >> The feedback on the original question was mostly positive.
8 > >> Most people agree that the long stabilization queues for these
9 > >> architectures create problems
10 > >> for maintainers wishing to drop old versions.
11 > > Is this the only motivation? Drop all the effort that has been put into
12 > > stabilization work on minor arches just for some impatient maintainers?
13 > >
14 > > Keywording/Stabilization is a process we all agreed on joining, so live
15 > > with it.
16 >
17 > Minor arches holding up GLSAs and removal of vulnerable stable ebuilds
18 > for 3 months or more is *not* acceptable, and not something I agreed
19 > to when joining...
20 >
21 > If they can't even do security stabilizations in a reasonable
22 > timeframe, they have no business being considered stable arches.
23
24 In the past, I have had arch teams refuse to stabilize a newer version
25 of a package after an older version is stable unless a user of the arch
26 wants the new version to be stabilized, thus forcing older versions to be
27 kept around for their stable users.
28
29 IMO if an arch team does this, maintainers should be able to move
30 the affected package to ~ on that arch, or maybe even drop that arch's
31 keyword entirely.
32
33 William

Attachments

File name MIME type
signature.asc application/pgp-signature