-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 6/30/10 12:29 PM, Tom Lane wrote:
Will Woods <wwoods(a)redhat.com> writes:
> On Wed, 2010-06-30 at 15:04 -0400, Tom Lane wrote:
>> Yes I can. I have two critpath packages that are in testing with
>> security bugs, both pretty small and easy to test, and both still have
>> karma zero. That seems to me to be adequate proof that there's not the
>> manpower out there to do this.
> Have you actually asked anyone to test it? Or even considered
> *mentioning the names of the packages* so maybe someone here could help?
I mentioned libtiff in my first comment in this thread. The other one
is libpng. But in any case, are maintainers supposed to have to scare
up testers on their own? Especially for packages that are supposed to
be so central as to be critpath? If there aren't testers coming out of
the woodwork, this scheme is doomed to failure.
regards, tom lane
It worked just fine when F13 branched before F13 released. We're
putting even more resources into it now, ergo it should work just as fine.
- --
Jesse Keating
Fedora -- FreedomĀ² is a feature!
identi.ca:
http://identi.ca/jkeating
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org/
iEYEARECAAYFAkwrqMEACgkQ4v2HLvE71NUDxgCgpPyHdKSQi0XVng1fc3HGCEzg
gqEAniEOlhRJrctTk4iKOqrfCz21y4bC
=GLK5
-----END PGP SIGNATURE-----