On 13 Jan 2017 11:59 pm, "Kevin Fenzi" <kevin@xxxxxxxxx> wrote:
On Fri, 13 Jan 2017 00:18:09 +0000Well, I am a bit leary of doing that. There may be people using the 1.9
Peter Robinson <pbrobinson@xxxxxxxxx> wrote:
> On Thu, Jan 12, 2017 at 8:44 PM, Kevin Fenzi <kevin@xxxxxxxxx> wrote:
> > Greetings.
> >
> > When ansible 2.0 was released there were some changes in playbook
> > handling made. For this reason, we created a backwards compatible
> > package with ansible 1.9 to ease the transition for those that
> > needed more time to adjust their playbooks.
> >
> > Late last year it looked like there would be a final release in the
> > 1.9 series addressing some security issues. However, the most
> > recent round of security issues found in 2.x are difficult to
> > impossible to backport to 1.9 so there will not be a final 1.9
> > release.
> >
> > Since it has now been 1 year since ansible 2.0 was released, and
> > since ansible 1.9 has known security vulnerabilities, backporting
> > fixes is impossible, we will be retiring the ansible1.9 package
> > from EPEL.
> >
> > All ansible 1.9 users are urged to update to 2.x as soon as
> > possible.
>
> Will the mainline 2 package obsolete the old package to ensure it
> doesn''t hang around?
packages that are aware of the security issues and still wish to keep
using it longer for whatever reasons.
It's been a year already... If they really want to do that they they can just not install the update or configure their system to exclude ansible.
When you retire it'll vanish from the EPEL mirrors anyway due to the east we handle that so they'd have to get ansible19 from koji anyway for future installs, or make an internal repo with it... In which case they'll be configuring their systems for it.
It's not like they'll get any support for 1.9 in any way from Fedora, EPEL or upstream after all.
Obsoleting does make a lot of sense to me.
_______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
