Re: [Security-Discuss] Re: [Security Announce] MDKSA-2005:113 - Updated clamav packages fix vulnerability

Vincent Danen schrieb:

>> wouldn't it make sense in the case of this package, to update to  the 
>> latest
>> stable version?
>> Clamav complains about being too old and actually lacks  
>> functionality when
>> older versions are used...
>>
>> Just a thought.
>
>
> Thanks for the thought, but no.  It actually wouldn't make sense.  We  
> have an established policy that has been noted many *many* times that  
> we patch packages rather than update to the latest and greatest so as  
> to prevent regressions or rebuilds in other packages that require  
> what we're updating.
>
I think it´s time to think about this policy again. With the upcoming 
longer product lifetime I do see good reasons for real upgrades. 
Resourses are no good argument for a commercial produkt. I would accept 
this for a real community distribution but not for a payed one.

So why you have the ressources to release every 2 months a club release 
only for eyecandy reasons like latest kde?

It´s becoming hard to understand your policy.

Why not release public testing packages and then release real upgrades 
after a short period? Maybe that would be an advantage in competition too.

Andreas Radke

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________