On Thu, Oct 12, 2006 at 03:52:04PM +0200, Gabriel C wrote: > This make sense.A patch whatever official or not should go in current > and need be 'tested' > to see is 'really' fixing this issues. Then go in stable.
Sure. > > The point of the sec support to fix programs in -stable ASAP. > > If you fix something before me in -current, that means less work for me, > > but i can't wait for the m8r every time. > > Yeah I can unterstand you but still is 'stupid' to fix something is > stable befor fixed in current without *any* testing and without to know > those > patches are really working. Agreed. > What we what is to 'fix' security bugs in stable ASAP , this does not > means to > rush things. Right. > > I can not guarantee that i'll fix everithing in -current first. That's > > too much work for me. And i don't want to touch other's packages. > > This is the point is much stuff for a one man team but if you want to > fix ASAP you really need fix both current and stable. > Let me explain :P With pushing this patch in stable first you 'already > touched that package' and 'the maintainer is *forced*' > to push *the* same patch to current , whatever is right , wrong is > working or whatever not. You cannot push different patches for the same > FSA , no ? ;). Anyway you don't have to recompile the current patches > but add this patch to build() in current , add right sha1sums() , bump rel, > and push. Everything else is done by syncpkgd.I hope you got the point. I disagree this point. When i use a patch in -stable you don't have to use the same in -current. FSA is for -stable fixes, i do not create FSA for -current. The main problem that i have only one pc, so i can not use both -current and -stable. If i switch to -stable i can not test my packages in -current. I should have a pc for testing backported packages. As for now the secfix packages hit -stable without real testing :( So until i win the lottery we have to use this "fix in -current first" model. It's not good, but it seems to be the best solution. I will fix only "fixed in -current" [SEC] bugs from now. -- voroskoi _______________________________________________ Frugalware-devel mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-devel
