From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DMARC_NONE,MAILING_LIST_MULTI autolearn=unavailable autolearn_force=no version=4.0.0 Received: from oaktree.cisco.com (oaktree.cisco.com [144.254.15.105]) by chiba.3jane.net (Postfix) with ESMTP id 16013ABD8B for ; Thu, 20 Jun 2002 06:47:01 -0500 (CDT) Received: from localhost (wmertens@localhost) by oaktree.cisco.com (8.11.6+Sun/CA/950118) with ESMTP id g5KBl0I24635 for ; Thu, 20 Jun 2002 13:47:00 +0200 (CEST) X-Authentication-Warning: oaktree.cisco.com: wmertens owned process doing -bs Date: Thu, 20 Jun 2002 13:46:59 +0200 (CEST) From: Wout Mertens X-X-Sender: wmertens@oaktree.cisco.com To: gentoo-dev@gentoo.org Subject: Re: [gentoo-dev] Apache security hole and ebuild In-Reply-To: <20020619221317.GB2151@wasd.dk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=X-UNKNOWN Content-Transfer-Encoding: QUOTED-PRINTABLE Sender: gentoo-dev-admin@gentoo.org Errors-To: gentoo-dev-admin@gentoo.org X-BeenThere: gentoo-dev@gentoo.org X-Mailman-Version: 2.0.6 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Gentoo Linux developer list List-Unsubscribe: , List-Archive: X-Archives-Salt: 8690a5f8-1bdf-4408-8c24-af505e012b19 X-Archives-Hash: 2c01302aff2408654663667896526fc6 Hey Bjarke, On Thu, 20 Jun 2002, Bjarke [iso-8859-1] S=F8rensen wrote: > On Wed, Jun 19, 2002 at 09:44:38AM -0400, Grant Goodyear wrote: > > Actually, all of the changes are documented. Take a look > > at /usr/portage/net-www/apache/ChangeLog. > > Ohh, yeah. > > Just not when you already worked arround this and have this > "complicated/large site". Sorry I missed the announce that something > vital was done to apache. Good thing I havn't blindly upgraded. Which is very good, as a "complicated/large site"-admin, you need to test things before you make them happen. If you tweak stuff in a package, you can expect it to break updates... > Too many people have problems with it. But maybe we all expected > something more than a note in a changelog for such a change. But that is exactly what Changelog is for, notifying the user about what changed. Although I admit it doesn't have a lot of visibility, we might want to do something about that, like an option on emerge that shows the changelogs since your version... If you have other ideas, please tell us. Wout.