Gentoo Archives: gentoo-sparc

From: Ferris McCormick <fmccor@g.o>
To: gentoo-sparc@l.g.o
Cc: x11@g.o, koon@g.o
Subject: [gentoo-sparc] xorg-x11-6.[7.0-r2, 8.0-r1] security & feature updates. Bugs 64152, 63994
Date: Tue, 21 Sep 2004 00:13:57
Hash: SHA1

Here is my daily xorg-x11 scare bulletin:

According to spyderous, the sparc modifications for the 6.8.0-r1
ebuild for allowing correct build and install of xorg-x11-6.8.0-r1
will be integrated into the main 6.8.0-r1 ebuild.  At that time,
based on our testing to date, xorg-x11-6.8.0-r1 will earn its ~sparc.

Currently, xorg-x11-6.7.0-r2 is keyworded ~sparc.

"Real soon" after 6.8.0-r1 goes ~sparc, we expect 6.7.0-r2 to
go stable: For reasons discussed in the referenced bugs, my previous
emails, and other previously referenced documentation, for security
reasons an upgrade to one of these is strongly recommended.
I believe that the x11 team & security team intend to pull earlier
versions of X11.

Please provide feedback on either of these two upgrades if you have
any experience with them.  This is especially so because we are in
the following unusual situation:

1. As an upgrade, 6.7.0-r2 is not a major change from 6.7.0-r1.
   It should just require a new 'emerge -bv xorg-x11' (or whatever
   you use), and off you go.

   However, we have little or no first hand experience with it so
   we believe this in theory but don't have a lot of evidence.

2. No matter how you look at it, the move from 6.7.0 to 6.8.0 is
   a big deal.  Especially for sparc for reasons spelled out in
   the referenced notes.  Realistically, we should expect problems,
   base on some old xfree releases.

   However, just because of this, for the last month we have been
   testing it, and as a result many (most? all?) show stopper
   problems have been fixed by xorg or are addressed in the little
   patch to 62994, now being integrated into the ebuild.

   So, our experience running xorg-x11 at this point suggests that
   6.8.0-r1 is very stable.  That's because some of us have been
   running it production for as long as a month.

   But in a few spots, some trivial, some not quite so trivial,
   6.8.0-r1 is not a rebuild-and-xinit upgrade.  There are a
   few incompatibilities, as you can infer from the discussions
   in the referenced documents.

Based on this, it's probably better to keyword 6.7.0-r2 stable,
6.8.0-r1 ~sparc, but suggest 6.8.0-r1 is a really good thing
to try if you have a choice.  Even though this upgrade is not
user transparent.

So, expect to upgrade to 6.7.0-r2 soon; this should be
compatible with 6.7.0-r1.  (And the fallback is to 6.8.0-r1,
which is not quite compatible.)

Confused? Worried? Angry? Busy building your very own 6.8.0-r1?
Please provide feedback.

- --
Ferris McCormick (P44646, MI) <fmccor@g.o>
Developer, Gentoo Linux (sparc)
Version: GnuPG v1.2.4 (GNU/Linux)


gentoo-sparc@g.o mailing list