Re: Again from debian planet

[Andrew Suffield <asuffield@debian.org>]

On Mon, Jan 28, 2002 at 04:11:47PM +0100, Paolo Redaelli wrote:
>     Month 1:
>     
>     Debian Core (3.0) released.
>     
>     Month 2:
>     
>     Debian Main (3.0) released (depends on Core 3.0)
>     
>     Month 3:
>     
>     Debian Extras (3.0) released (depends on Main 3.0)
>     Debian Core (3.1) released.

Debian Core (3.1) breaks a dozen of the thousands of packages in
"Extras", including three remote root holes and a DoS attack.

Debian gets slammed in all major security journals.

>     Month 4:
>     
>     Debian Main (3.1) released (depends on Core 3.1)
>     Debian Core (3.2) released.

Same thing happens, only this time it breaks hundreds of the packages
in Extras (3.0), so circular dependencies are introduced to prevent
this happening again. Since some libraries change every time, we wind
up with Extras 3.0 depending on Core (== 3.0), and vice-versa.

Oh, bugger.

-- 
  .''`.  ** Debian GNU/Linux ** | Andrew Suffield
 : :' :  http://www.debian.org/ | Dept. of Computing,
 `. `'                          | Imperial College,
   `-             -><-          | London, UK