Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-25 Thread Matt Zimmerman
On Fri, Jul 25, 2003 at 02:38:29PM +0200, Jesus Climent wrote: > By taking so long from release to release (NO ofense to anyone) we provide old > and buggy software (in some cases) which only gets security fixes, but then > the fame of Debian being rock solid might not be true in all its senses.

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-25 Thread Jesus Climent
On Fri, Jul 25, 2003 at 01:44:39PM +0200, Marco d'Itri wrote: > On Jul 25, Jesus Climent <[EMAIL PROTECTED]> wrote: > > >Bind9, as provided in woody, keeps on falling to its knees for unknown > >reasons. A strace might help, but so far i have not been able to either keep > BIND 9 in woody is old

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-25 Thread Marco d'Itri
On Jul 25, Jesus Climent <[EMAIL PROTECTED]> wrote: >Bind9, as provided in woody, keeps on falling to its knees for unknown >reasons. A strace might help, but so far i have not been able to either keep BIND 9 in woody is old and buggy, that's all. Ask upstream about this version and they will te

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-25 Thread Jesus Climent
On Wed, Jul 23, 2003 at 09:13:18PM +0200, Adrian Bunk wrote: > > Debian stable is horribly outdated but I'm not aware of any severe bugs. > Could you provide some examples of severe bugs in Debian 3.0? Bind9, as provided in woody, keeps on falling to its knees for unknown reasons. A strace might

SpamAssassin /etc cleanup (was: Re: Why back-porting patches to stable instead of releasing a new package.)

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 06:47:33PM +0200, Adrian Bunk wrote: > > > > The package (1) does not deal with the logcheck mess that I am trying to > > solve. > > This problem [1] was reported a week ago isn't even fixed in unstable. > > Get it fixed in unstable and the fix will go into the backport.

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 06:48:58PM +0200, Jesus Climent wrote: > On Wed, Jul 23, 2003 at 05:24:19PM +0200, Adrian Bunk wrote: > > > > > > So you agree on having a bounce of personal archives on p.d.o rather than > > > a > > > way of getting them in stable trough oficial channels? > > > > If you

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 07:30:39PM +0200, Andreas Barth wrote: > > But I want to emphasize that getting nearer a new stable release would > be much better than discussion how to allow users to use updated > applications in stable. Did I mention that I agree? Didn't I? No, I didn't. Well, I agree.

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Andreas Barth
* Jesus Climent ([EMAIL PROTECTED]) [030723 18:50]: > On Wed, Jul 23, 2003 at 04:45:54PM +0200, Andreas Barth wrote: > > That applies to data-files (or very similar things) like spamassasin. > > There should be in the README.Debian given a location for the backport > > by the maintainer. > Spamass

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 05:24:19PM +0200, Adrian Bunk wrote: > > > > So you agree on having a bounce of personal archives on p.d.o rather than a > > way of getting them in stable trough oficial channels? > > If you use only stable you get the well-known stability of Debian. Which might be where

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 06:27:59PM +0200, Jesus Climent wrote: > On Wed, Jul 23, 2003 at 03:02:59PM +0200, Andreas Metzler wrote: > > On Wed, Jul 23, 2003 at 02:17:29PM +0200, Jesus Climent wrote: > > > > Why should you redo this work? > > http://www.fs.tum.de/~bunk/packages/ > > The package (1)

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 04:45:54PM +0200, Andreas Barth wrote: > > That applies to data-files (or very similar things) like spamassasin. > There should be in the README.Debian given a location for the backport > by the maintainer. Spamassassin needs more than data files, since the rules relay on

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 03:02:59PM +0200, Andreas Metzler wrote: > On Wed, Jul 23, 2003 at 02:17:29PM +0200, Jesus Climent wrote: > > Why should you redo this work? > http://www.fs.tum.de/~bunk/packages/ The package (1) does not deal with the logcheck mess that I am trying to solve. data (1) s

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 10:17:35AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 04:35:04PM +0200, Adrian Bunk wrote: > > If you _really_ need or want a more recent version of a package there's > > always the possibility to use a backport. > > So you agree on having a bou

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 04:35:04PM +0200, Adrian Bunk wrote: > If you _really_ need or want a more recent version of a package there's > always the possibility to use a backport. So you agree on having a bounce of personal archives on p.d.o rather than a way of getting them in stable trough ofici

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Andreas Barth
* Luca - De Whiskey's - De Vitis ([EMAIL PROTECTED]) [030723 16:35]: > On Wed, Jul 23, 2003 at 03:54:32PM +0200, Adrian Bunk wrote: > > If there was a stable release of Debian once a year Debian 3.1 was > > already released. > hehe, i knew you would have came to that suggestion sooner or later :)

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Mattia Dongili
On Wed, Jul 23, 2003 at 04:37:58PM +0200, Adrian Bunk wrote: > On Wed, Jul 23, 2003 at 04:24:18PM +0200, Mattia Dongili wrote: > > > > what about splitting those packages in such a way that there's > > 1. a base package and > > 2. a plugin/data/whatever package > > > > 2 must be explicitly appro

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Andreas Barth
* Luca - De Whiskey's - De Vitis ([EMAIL PROTECTED]) [030723 14:35]: > ... said that your points are good, it may be useful to define a forum for the > discussion of cases like phpgroupware or snort. In the end i whould say that > there must be a general behaviour, but we should leave space for dis

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 04:24:18PM +0200, Mattia Dongili wrote: > > what about splitting those packages in such a way that there's > 1. a base package and > 2. a plugin/data/whatever package > > 2 must be explicitly approved to be an updatable stable package. This > must obviously only apply to

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 09:17:14AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 03:54:32PM +0200, Adrian Bunk wrote: > > If there was a stable release of Debian once a year Debian 3.1 was > > already released. > > hehe, i knew you would have came to that suggestion soone

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 04:17:57PM +0200, Frank Lenaerts wrote: >... > > > The not base part could be split further into parts. These parts could > > > be things related to mailservers, things related to webservers, > > > database servers, IDS, end-user workstations, ... Because each of > > > these

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Mattia Dongili
On Wed, Jul 23, 2003 at 08:41:50AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 03:05:23PM +0200, Adrian Bunk wrote: > > Do not even start thinking about something like this. > > To late: if i wrote it, i thought it :) > > > If you start asking you will likely find more

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Frank Lenaerts
On Wed, Jul 23, 2003 at 04:05:30PM +0200, Adrian Bunk wrote: > On Wed, Jul 23, 2003 at 03:08:30PM +0200, Frank Lenaerts wrote: > >... > > As base is quite small, it could be released more frequently. The not > > base part could evolve independent from the base part. > > Consider e.g. a g++ transit

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 03:54:32PM +0200, Adrian Bunk wrote: > If there was a stable release of Debian once a year Debian 3.1 was > already released. hehe, i knew you would have came to that suggestion sooner or later :) But there are softwares for which it could make sense to update more than on

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Matt Zimmerman
On Wed, Jul 23, 2003 at 08:58:55AM -0500, Luca - De Whiskey's - De Vitis wrote: > Things are clearer now. You're right: i should have done a new package by > time, but you probably ignore that, due to lack of time, i've filed an RFA on > phpgroupware which resulted in many mails and no real effort

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 03:08:30PM +0200, Frank Lenaerts wrote: >... > As base is quite small, it could be released more frequently. The not > base part could evolve independent from the base part. Consider e.g. a g++ transition or a transition to a new version of perl: There is no simple way to

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 09:10:01AM -0400, Matt Zimmerman wrote: > This is already in the security team FAQ, and in the developers reference in > section "5.8.5.3 Preparing packages to address security issues", but > apparently it requires further explanation, because this issue comes up from > time

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 08:41:50AM -0500, Luca - De Whiskey's - De Vitis wrote: >... > I accept your observation on my proposal, but i would more appreciate other > ideas and/or solutions. If there was a stable release of Debian once a year Debian 3.1 was already released. > ciao, cu Adrian --

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Richard Kettlewell
Adrian Bunk <[EMAIL PROTECTED]> writes: > If you start asking you will likely find more than thousand packages > where someone will have a good reason for an update of the package > in Debian 3.0. If only every 10th of these updates introduces a new > bug (IMHO a conservative estimation) these pack

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 03:05:23PM +0200, Adrian Bunk wrote: > Do not even start thinking about something like this. To late: if i wrote it, i thought it :) > If you start asking you will likely find more than thousand packages > where someone will have a good reason for an update of the package

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Matthias Urlichs
Hi, Nick Phillips wrote: > I believe that when a package is so badly outdated or broken that the > version in stable should not or can not be used, it should at least be > considered for update, new bugs or no. FWIW, I agree. -- Matthias Urlichs | {M:U} IT Design @ m-u-it.de | [EMAIL PRO

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Andreas Metzler
On Wed, Jul 23, 2003 at 02:17:29PM +0200, Jesus Climent wrote: > On Wed, Jul 23, 2003 at 07:09:01AM -0500, Luca - De Whiskey's - De Vitis wrote [...] > And another one: Who would ever use a SpamAssassin tool which cannot > catch any of the spam out there nowadays? 2.20-1woody is so old and > timely

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Matt Zimmerman
On Wed, Jul 23, 2003 at 03:15:55AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Tue, Jul 22, 2003 at 06:36:06PM -0400, Matt Zimmerman wrote: > > > I've some questions for you, first. Would you mind, please, to > > > explain to me why back-porting a patch for a buggy package in stable > > > w

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Frank Lenaerts
On Wed, Jul 23, 2003 at 07:09:01AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 01:19:25PM +0200, Sander Smeenk wrote: > > The same happened with one of my packages: snort. There was a /really/ > > old release in stable, because new uploads didn't make it in time. There >

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Adrian Bunk
On Wed, Jul 23, 2003 at 07:24:09AM -0500, Luca - De Whiskey's - De Vitis wrote: >... > ... said that your points are good, it may be useful to define a forum for the > discussion of cases like phpgroupware or snort. In the end i whould say that > there must be a general behaviour, but we should lea

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Nick Phillips
On Wed, Jul 23, 2003 at 01:31:52PM +0200, Fabio Massimo Di Nitto wrote: > Because you can never be sure that it will not change the package > behaviour in all its small details and that will not introduce new bugs. I believe that when a package is so badly outdated or broken that the version in s

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 01:31:52PM +0200, Fabio Massimo Di Nitto wrote: > Because you can never be sure that it will not change the package > behaviour in all its small details and that will not introduce new bugs. ...And that is a rock solid concept if applied in general. > Probably in the speci

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Jesus Climent
On Wed, Jul 23, 2003 at 07:09:01AM -0500, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 01:19:25PM +0200, Sander Smeenk wrote: > > The same happened with one of my packages: snort. There was a /really/ > > old release in stable, because new uploads didn't make it in time. There >

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 01:19:25PM +0200, Sander Smeenk wrote: > The same happened with one of my packages: snort. There was a /really/ > old release in stable, because new uploads didn't make it in time. There > were a couple of reasons why it would be good to have a new upstream > version of the

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Fabio Massimo Di Nitto
On Wed, 23 Jul 2003, Luca - De Whiskey's - De Vitis wrote: > On Wed, Jul 23, 2003 at 11:57:54AM +0200, Fabio Massimo Di Nitto wrote: > > > > http://www.debian.org/doc/developers-reference/ch-pkgs.en.html#s-bug-security > > > > in particular "5.8.5.3 Preparing packages to address security issues" >

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Sander Smeenk
Quoting Luca - De Whiskey's - De Vitis ([EMAIL PROTECTED]): > My point is: i understand what said in that paragraph, but what if new version > is a bugfix release that does not address only a secutiry issue? I'm not sure > that system administrators would like to have a buggy package on their host

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Wed, Jul 23, 2003 at 11:57:54AM +0200, Fabio Massimo Di Nitto wrote: > > http://www.debian.org/doc/developers-reference/ch-pkgs.en.html#s-bug-security > > in particular "5.8.5.3 Preparing packages to address security issues" It doesn't answare my question. I should explain my self in a differ

Re: Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Fabio Massimo Di Nitto
http://www.debian.org/doc/developers-reference/ch-pkgs.en.html#s-bug-security in particular "5.8.5.3 Preparing packages to address security issues" will answer your question Fabio On Wed, 23 Jul 2003, Luca - De Whiskey's - De Vitis wrote: > On Tue, Jul 22, 2003 at 06:36:06PM -0400, Matt Zimme

Why back-porting patches to stable instead of releasing a new package.

2003-07-23 Thread Luca - De Whiskey's - De Vitis
On Tue, Jul 22, 2003 at 06:36:06PM -0400, Matt Zimmerman wrote: > > I've some questions for you, first. > > Would you mind, please, to explain to me why back-porting a patch for a > > buggy package in stable would be better than releasing a new package for the > > stable distribution? > > Do you m