On Thu, 2007-03-29 at 11:01 -0700, Joe Pruett wrote:
Joe Pruett wrote:
Is it this one in the upstream?
yes, that is the one. i was wondering if the announcement just was forgotten or if the updates wasn't really ready yet but slipped into the repos.
Which would annoy you more?
- Update sans announcement
- Announcement sans update.
There will always be a timing issue, and I'd go with releasing the update, allowing mirrors to sync and then the announcement.
i was actually more concerned about a rogue package getting slipped in somehow.
That is why we sign packages ... if it has our key, it is good to go :P
The real issue was that RH initially released it for fastrack, then they moved it without announcement (it is a bug fix and not a security fix) into main updates for el3 ... we followed suit.