Re: Technical committee resolution
On Thu, Apr 03, 2008 at 11:51:06PM +0200, Moritz Muehlenhoff wrote:
> > And if so, what is the plan for wordpress in etch and lenny?
>
> I recommend to drop it from Lenny, but if people choose to
> repeat mistakes I won't waste my time on argueing.
I don't quite see the point of this...
http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=wordpress;dist=stable
shows zero RC bugs, and I found two DSA-s for it, 1258 and 1502.
The remaining filed bugs which relate to security are explicitly marked by
the maintainers as too minor to warrant updates, so it doesn't look like
the security team is particularly burdened.
I don't see the wordpress inclusion as a mistake. Comparing it to the
situation where we currently don't have mantis in etch, because of a similar
bug report - there the decision wasn't elevated to tech-ctte as the package
was unmaintained, so it went by unnoticed. The package was taken three
months after the report, but by that time it was too late, I guess.
As an application to which access is customarily restricted from the start
(private bug tracking systems), mantis is even less of a real-world security
problem, yet we've completely deprived etch users of a package, and this
actually hurt the sarge users who can't upgrade to the improved version.
--
2. That which causes joy or happiness.
Reply to: