Round-up, 2004-09-09

[Eric Rostetter]

Quoting Andres Adrover Kvamsdal <listas at andreso.net>:

> >>squirrelmail - https://bugzilla.fedora.us/show_bug.cgi?id=1733
> >>Needs 2 VERIFY before release (also double check no new issues have
> >>cropped up)
> 
> This is the main problem I see with Fedora Legacy.  "double check no new
> issues have cropped up"

I agree (I think).

> As I see it Fedora Legacy should release ASAP.

ASAP after receiving two publish votes.  Come on people, test and vote!!!

>   Remember that redhat has released several broken packages.

We want to avoid releasing broken packages at all costs.

But we shouldn't stop a functioning, tested patch that fixes a security
problem be delayed just because a second problem is found in the same
package.

If the first problem is fixed and tested, it should be released even
if another (existing) problem is identified with that package.  Waiting
until all known problems are fixed just delays releases for ever, discourages
people from testing them (since they test is no invalidated), and causes
complaints and bad PR for the FLP.

> They fixed
> that releasing improved packages some few days later.

Hopefully we won't have broken packages, so we won't have to fix them.
But I see no problem with releasing a package to fix BUG #1 on Tuesday,
then releasing the same package to fix BUG #2 on Friday (for example).
 
> I do not understand why Fedora Legacy has to be better than RedHat.

We don't.  But even Red Hat tries not to release broken packages, and
even Red Hat won't release something without QA testing.  We need to
follow that lead.  But we shouldn't delay tested patches for new,
not-yet-existing patches, which we have done in the past, and looks like
we may be doing again now...

> Andres

-- 
Eric Rostetter