Re: Packages security updates in -stable

2017-09-11 Thread Stuart Henderson
On 2017-09-09, Lukasz Jendrysik wrote: > Hello, > > Since the main goal of OpenBSD is security, I keep wondering about one > thing. > There are packages like irssi or Thunderbird that should be updated to > the newest upstream version. > For example irssi's upstream encourages all users to upgra

Re: Packages security updates in -stable

2017-09-09 Thread Daniel Jakots
On Sat, 9 Sep 2017 21:16:36 +0200, Lukasz Jendrysik wrote: > Similar situation with Chromium etc. All of those packages exists in > newer versions in -current, but it's not an option in my case. > > I understand that -stable is not place for the latest packages > available and it's expected to

Re: Packages security updates in -stable

2017-09-09 Thread Lukasz Jendrysik
On 09/09/2017 22:23, Theo de Raadt wrote: For example irssi's upstream encourages all users to upgrade to the newest one, see: https://irssi.org/2017/07/07/irssi-1.0.4-released/ Similar situation with Chromium etc. All of those packages exists in newer versions in -current, but it's not an opti

Packages security updates in -stable

2017-09-09 Thread Lukasz Jendrysik
Hello, Since the main goal of OpenBSD is security, I keep wondering about one thing. There are packages like irssi or Thunderbird that should be updated to the newest upstream version. For example irssi's upstream encourages all users to upgrade to the newest one, see: https://irssi.org/2017/

Re: Packages security updates in -stable

2017-09-09 Thread Theo de Raadt
> >> I understand that -stable is not place for the latest packages available > >> and it's expected to be rock solid, but also secure. > The thing is that mentioned packages are already updated in MAIN. Twice the work == twice the work. > I'm curious how looks the process of merging package upda

Re: Packages security updates in -stable

2017-09-09 Thread Theo de Raadt
> Since the main goal of OpenBSD is security, I keep wondering about one > thing. > There are packages like irssi or Thunderbird that should be updated to > the newest upstream version. These two sentences don't make sense together. You equate "update update" with security. That doesn't make s

Re: Packages security updates

2011-04-19 Thread Landry Breuil
On Mon, Apr 18, 2011 at 11:45 PM, enclair wrote: > Hi, > > the FAQ says: > > "When serious bugs or security flaws are discovered in third party software, > they are fixed in the *-stable* branch of the ports tree. Remember that the > lifecycle is 1 release: only the current and last release are up

Re: Packages security updates

2011-04-18 Thread roberth
On Mon, 18 Apr 2011 23:45:10 +0200 enclair wrote: > Hi, > > the FAQ says: > > "When serious bugs or security flaws are discovered in third party > software, they are fixed in the *-stable* branch of the ports tree. > Remember that the lifecycle is 1 release: only the current and last > release

Packages security updates

2011-04-18 Thread enclair
Hi, the FAQ says: "When serious bugs or security flaws are discovered in third party software, they are fixed in the *-stable* branch of the ports tree. Remember that the lifecycle is 1 release: only the current and last release are updated" Does it mean: 1) 4.8-stable and -current have securit