Re: Sarge kernels and Volatile
On Tue, Aug 02, 2005 at 03:43:42PM -0400, Andres Salomon wrote:
until fairly recently; we've gotten conflicting answers ranging from "We
should provide kernel updates and the security team will use them
verbatim"
generally the security team at least glances at what's released in a
dsa.
to "Don't even bother providing an update, you're just wasting
your time".
I have no idea who said that.
problems and build (and work) on all 11 archs. We need to know just how
much leeway we have with our update; can we include an ABINAME bump?
We've done it before when absolutely necessary. I'd expect that to be a
last resort, because it'll definately screw people who expect apt-get to
magically upgrade them.
Can we include other important fixes?
Not in a security update, unless it's security-critical. You can argue
with the stable release manager over additional changes to a package in
sarge-proposed-updates.
of security fixes that don't break the ABI? Will you leave it up to our
judgement as to what security fixes to include, or will you have to ok
each and every patch?
Expect it to be reviewed, but as long as you don't make any mistakes
your judgement should be fine. :)
As for taking responsibility for the security updates, I believe Horms
is more than willing
He's the one who told me nobody was coordinating kernel security
updates...
Mike Stone
Reply to: