Hi,

Steffen Joeris schrieb am Wed, Jun 04, 2008 at 11:24:06PM +1000:
> Yes, I am aware that the stable team knows about it.

Oh, ok.

> The issue, however, is unembargoed (and thus public and known)

Of course it is.

> and nothing stops you from uploading fixed packages to unstable.

That's not right. slash is currently uninstallable in Sid (due to the
dependency on Apache 1.3, see #429071) and I asked in my reply to the
last mail from the Security Team how to deal with this issue in in
unstable, but never got an answer. (If there are any misunderstandings
in regards of this, I'm happy if I can clear them.)

But fixing #429071 is quite a lot of work through which I'm currently
not completely through (and maybe I won't be for lenny).

> I had a look at the etch packages you provided for the security
> update and saw that there are some other changes to all the
> Makefiles. Also there is some code added into the postinst to
> restart apache. Are these changes really necessary for the security
> update?

IIRC they were other changes necessary because otherwise the upgrade
would fail (what's not the idea of a security update IMHO).

I initially took over the package in a quite bad shape, fixed nearly
all of the at that time open bugs for Etch. But I seem to have
overseen that there were also some bugs when upgrading the package. At
least my upgrade tests resulted in the package wanting to create new
databases, etc. I at least remember that I had to change some more
things than just the bug to make the upgrade work smooth.

I'm still not sure how to deal with this in unstable, but the next
upload for this package will surely go to experimental, so the package
shouldn't be that long in unstable anymore. Maybe this can be seen as
fix for the issue.

                Regards, Axel
-- 
/~\                                    | Axel Beckert
\ /  Plain Text Ribbon Campaign        | [EMAIL PROTECTED]     (Mail)
 X   Say No to HTML in E-Mail and News | [EMAIL PROTECTED]    (Mail+Jabber)
/ \                                    | http://noone.org/abe/    (Web)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to