On Fri, 5 Oct 2012 15:20:16 -0800 Jef Spaleta <jspaleta@xxxxxxxxx> wrote: > On Fri, Oct 5, 2012 at 3:06 PM, Kevin Fenzi <kevin@xxxxxxxxx> wrote: > > Ugh. Shall I unpush those from going stable then until this is > > figured? > > > > Sorry about that... > > I am a firm believer in the Pottery Barn rule. You break it you buy > it. If you feel this is important enough of a security fix to break ui > then push it as an update, as long as you take point on unwinding the > ui damage. Well, I don't use it, I just wanted to provide the security update. If you don't think it's worth pushing as a maintainer due to the breakage, I can move it back to testing. > F18 will have it out of the box regardless. yeah. > The other thing to note is that for anyone who uses the revelation key > file across multiple systems, once you upgrade to this version your > other system with the older revelation can't open the file any more. > An additional wrinkle I don't think anyone has considered. People > trying to use revelation out of the box for F18 and then using that > file on another linux distribution is going to be for a big surprise. > See any other desktop oriented distros moving to the new version in > their latest or upcoming releases? Revelation upstream was > effectively dead for so long, I doubt many people have noticed it was > forked and given a new upstream hope... or even noticed the encryption > weakness when it was announced. Fun. kevin
Attachment:
signature.asc
Description: PGP signature
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
