On 8/3/07, Henri Yandell <[EMAIL PROTECTED]> wrote: > In this case, it's not a new bug that had just shown up. It was > kicking around the issue tracker for a fair while. I'd much rather see > a normal vote happening, and am happy with a vote on private@ if it's > for a security release and the issue is not yet public (this one was, > but we get others that aren't). Definitely not a 'as soon as we have 2 > other +1s then we'll release'. Maybe a 24hr or 48hr vote, probably > with a cc to private@ as a heads up.
Just because the fix was a few days in coming doesn't mean that once we have a fix, we shouldn't get it out to our users ASAP. The decision should be based on the seriousness of the issue, which in this case, was about as serious as it gets. As I said before, I'd accept any proposal that has the release getting out to our users within 24 hours, but no more. Don --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
