Sidney Markowitz wrote:
> Matt Kettler wrote, On 17/7/07 1:19 PM:
>   
>> I'm having trouble getting 3.1.10 to pass "make test" as root. Passes
>> just fine as a non-root user.
>>
>> Looks like the spamd "tell" based tests are the ones failing..
>>     
>
> (coming out of lurk mode now that power is restored on my road)
>
> That looks like bugs 5510 and 5529 which don't appear to have been
> backported to 3.1 branch.
Interesting.. I didn't know 3.1.x was affected at all, I thought only
3.2.1 was... And doing some tests, 3.1.8 isn't affected, but 3.1.9 is.

Looks like someone backported the bug when 3.1.9 went out, and we've
never back-ported the fix. That said 3.1.9 fails allow tell AND freezes
up at the allow_user_rules bit, 3.1.10 only fails in the allow tell
part. So 3.1.10 is a bit less severely broken than 3.1.9 is.

I guess since 3.1.9 is already broken, and this is actually less broken,
and it's a security fix,  I'm +1 on this release.

However, I make that +1 with the strong recomendation that we need to
get a 3.1.11 out sometime soon that actually builds properly under CPAN.

I understand the need to get security fixes out quickly, but shipping
releases with broken build processes is seriously bad. Breaking the
build process might be a reasonable short-term tradeoff to get security
fixes out faster, but it isn't a reasonable long-term tradeoff.






Reply via email to