On 8 February 2013 12:15, Rahul Sundaram <metherid@xxxxxxxxx> wrote: > Hi > > On Fri, Feb 8, 2013 at 9:46 AM, Michael Cronenworth wrote: >> >> At this point it is time for someone to update the package as it >> is currently a security hazard. I have already built the latest >> mediawiki package and have it ready to rock-and-or-roll once the NRM >> procedure is finished. > > > There is no need to wait on the NRM process for fixing security bugs. I > recommend you just go ahead and push out a build asap This package is a bit difficult to "fix". One it has custom patches that upstream doesn't accept. Two the fix is to upgrade to a very new version which will break everyone who upgrades until they (or the first person who gets to the website :) ) runs the upgrade mode.. which might not work due to either custom changes or the fact that it is a large upgrade change. > Rahul > > -- > devel mailing list > devel@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/devel -- Stephen J Smoogen. "Don't derail a useful feature for the 99% because you're not in it." Linus Torvalds "Years ago my mother used to say to me,... Elwood, you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel