[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Some clarifications about the Debian-security-HOWTO



On Saturday 21 February 2004 01.14, Matt Zimmerman wrote:
> On Fri, Feb 20, 2004 at 01:14:43PM +0100, Gian Piero Carrubba wrote:

> > Uploads that fix a security hole should have the priority set to high,
> > and this should reduce the transition delay to less than a week [1],
> > shouldn't it?
>
> It will reduce the best-case delay, but if the package is blocked from
> entering testing by its dependency relationships, the urgency does not
> change that.

... and sometimes people forget to leave urgency at 'high' until the fix is 
really in testing when they upload a new version.

The only sensible way to handle this is the current way: stating 'testing has 
now security support'. urgency='high' or not.

I run a stable/testing/unstable mix on my computers, and when a DSA is out I 
take a quick look and check which versions of the package I use. Downgrading 
a package from a testing version to a stable version is sometimes an option, 
for example.

cheers
-- vbi

-- 
Entre hermanos, dos testigos y un notario.

Attachment: pgpiyyDSH3bOt.pgp
Description: signature


Reply to: