Re: [Security-Discuss] Re: [Security Announce] MDKSA-2004:124 - Updated xorg-x11 packages fix libXpm overflow vulnerabilities

On November 5, 2004 06:32, Anne Wilson wrote:
> On Friday 05 Nov 2004 13:02, Stew Benedict wrote:
> > On Fri, 5 Nov 2004, Anne Wilson wrote:
> > > On Friday 05 Nov 2004 12:33, Stew Benedict wrote:
> > > > Well, Nov 4th is a Thursday in this part of the world anyway :)
> > >
> > > but since they go out overnight (in our time) that inevitably means
> > > Friday install or stay without updates until after the weekend.
> >
> > OK.  Vincent is in charge and decides the timeline.  What would you
> > propose, nothing after Wednesday? We could have held this update back
> > until Monday, which would still leave you without updates until next
> > week.  They were long overdue as it is, and I sort of stuck my foot in my
> > mouth mentioning the Nov 1 target we were attempting to hit for 10.1
> > updates.
>
> To some extent you can't win whatever you do.  For many packages, something
> going wrong with an update would be an annoyance, but sufferable for a few
> days if necessary.  For others like xorg-x11 it is a real show-stopper for
> most of us.  I'm guessing that not many updates are going to be such a
> problem.  Is it possible to consider which ones could cause such chaos, and
> only put out a late-week update if it is something absolutely vital?
>
> Just thinking aloud, you understand ;-)
>
> Anne

I say send them out whenever they are ready. Just because an update is 
available doesn't mean we have to install it right away. If you want auto 
updates, set up a cron job to install updates every Monday, or whenever you 
prefer. I usually do updates on Friday because that's when I have time, and 
if I'm down all weekend it's not critical for me. I don't do automatic 
updates. I'd rather have a fix available ASAP in case I need it, than to have 
it ready but being held due to some arbitrary schedule that might not match 
mine. This is Linux, we're in control of our own systems, not dependent on 
Big Brother!

-- 
Ron
ron dot hunterduvar at shaw dot ca

Opinions expressed here are all mine. Rights to use
these opinions are granted under the GNU GPL.

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________