Re: [gentoo-dev] Apache security hole and ebuild

[Wout Mertens <wmertens@gentoo.org>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: TEXT/PLAIN; charset=X-UNKNOWN, Size: 1108 bytes --]

Hey Bjarke,

On Thu, 20 Jun 2002, Bjarke [iso-8859-1] Sørensen wrote:

> On Wed, Jun 19, 2002 at 09:44:38AM -0400, Grant Goodyear wrote:
> > Actually, all of the changes are documented.  Take a look
> > at /usr/portage/net-www/apache/ChangeLog.
>
> Ohh, yeah.
>
> Just not when you already worked arround this and have this
> "complicated/large site". Sorry I missed the announce that something
> vital was done to apache. Good thing I havn't blindly upgraded.

Which is very good, as a "complicated/large site"-admin, you need to test
things before you make them happen. If you tweak stuff in a package, you
can expect it to break updates...

> Too many people have problems with it. But maybe we all expected
> something more than a note in a changelog for such a change.

But that is exactly what Changelog is for, notifying the user about what
changed. Although I admit it doesn't have a lot of visibility, we might
want to do something about that, like an option on emerge that shows the
changelogs since your version...

If you have other ideas, please tell us.

Wout.