Re: CVE-2015-7547 fix for Fedora 21

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Feb 21, 2016 at 10:45 PM, Kevin Kofler <kevin.kofler@xxxxxxxxx> wrote:
> Matthew Miller wrote:
>> I think what killed it was that lots of people were interested in
>> continuing on Red Hat Linux 7.x and Red Hat Linux 9 indefinitely, but
>> not nearly as many were interested in extended life for the early
>> Fedora Core releases. *shrug*
>
> That was a problem, but without the insane amount of red tape, it wouldn't
> have been a showstopper. It does not take much manpower to take the patches
> that are being applied to the old release n, apply them to the less popular
> intermediate release n+1, build the result and let it be automatically
> pushed to stable. The problem was that:
> * Fedora Legacy required every update for every release to be separately
>   QAed, kinda like Bodhi does now. This already does not work for Fedora n-1
>   now (just look at how long it takes to get even security updates for
>   Fedora n-1 through Bodhi), so there is no way it can work for n-k, k≥2.
> * For that QA, a Bugzilla instance was used, but the builtin authentication
>   of Bugzilla was not trusted for some reason, so all comments were required
>   to be manually GPG-signed! (There is of course no UI in Bugzilla that
>   automates that in any way.) Needless to say, very few testers were willing
>   to comply with such a ridiculously high barrier to entry.
> If you just let the changes get pushed directly to the repository, things
> will just work.
>
>         Kevin Kofler

I'd like to think that our processes and tools have improved
considerably since the days that Fedora Legacy was active. Perhaps it
could be something that could be started up as a SIG (analogous to how
the openSUSE Evergreen group works for the openSUSE Project) and tried
again? It would obviously be a smaller scale project initially, and
deal with only the most critical of issues to fix, but we have tools
to do automated tests, continuous integration, integrated external
repositories, and so on.


-- 
真実はいつも一つ!/ Always, there's only one truth!
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
http://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux