Re: flashplugin-nonfree 9.0.48.0.1etch1 for Stable

[dann frazier <dannf@dannf.org>]

On Thu, Aug 16, 2007 at 06:24:02PM +0200, Holger Levsen wrote:
> Hi,
> 
> On Thursday 16 August 2007 17:20, you wrote:
> > So can you please either show that the fixed tarball would only have few
> > differences with the existing one or that the new version is tested
> > enough to be considered?
> 
> Nope. So please remove it from etch. Currently that package is completly 
> unusable.

This may have been already discussed in other forums, so sorry if I'm
repeating questions, but it seems like removing a package within a
stable release should be a near last-resort - especially when it may
leave our users running systems with open security vulnerabilities.

 * Can we obtain (perhaps by contacting Adobe) a list of changes
   between these two releases? If some of them are significant, could
   we request a version that is more in alignment with our stable
   release guidelines?
 * If the above is not feasible, is it already clear (or could we make
   it more clear) to users that our package is fetching software that
   we have no control over? Of course, the changes we do control
   should meet the usual stable release guidelines...
 * And, what about moving to volatile?

If we do proceed with removal (or moving somewhere else), can we do so
by updating the package to warn users of the change?

-- 
dann frazier