{"id":921,"date":"2011-06-26T10:50:24","date_gmt":"2011-06-26T10:50:24","guid":{"rendered":"http:\/\/blog.mageia.org\/en\/?p=921"},"modified":"2017-04-06T05:55:09","modified_gmt":"2017-04-06T05:55:09","slug":"%ef%bb%bf%ef%bb%bfsecurity-updates-and-more-oh-my","status":"publish","type":"post","link":"https:\/\/blog.mageia.org\/en\/2011\/06\/26\/%ef%bb%bf%ef%bb%bfsecurity-updates-and-more-oh-my\/","title":{"rendered":"\ufeff\ufeffSecurity, Updates and More – Oh My!"},"content":{"rendered":"

From Stew Benedict (aka stewb)<\/em><\/p>\n

If you’ve been using Mageia 1, you may have been wondering where all the updates are. It’s customary to get quite a few updated packages in the first month or so of a new distribution to correct bugs and address security issues. Don’t worry, we’ve been working on that too.<\/p>\n

As a new organization, and a community driven one, we first had to work out how to do the updates. \u00a0While some of us have experience from previous lives, we weren’t entirely satisfied with the old process and wanted to make sure our new community of users and packagers had an input into how we’ll do things.<\/p>\n

So, after discussion and some work behind the scenes for the mechanics of issuing an update, we have now have a process<\/a> where the security team, the QA team, and the packager maintainer will all work together to build, test, and issue new updates. If you use MySQL, you should have seen the first update appear in the last couple of days and more are in the pipeline. Policies managing the process have been added to our wiki, and as we work through the first few packages we’re refining and documenting the process more thoroughly.
\nFor Mageia 1, we have a special exception for updates. So called “missing” packages that weren’t part of Mageia 1 but are in our sister distribution, can be issued as an update, rather than a backport, provided they pass the QA process.<\/p>\n

Hey, What About Backports?<\/strong><\/p>\n

<\/strong>We haven’t forgotten backports either, but we can’t do everything at once :). The discussions have just started on the development mail list as to how we will handle backports. Sometimes backport repositories have a somewhat bad reputation, and we want to fashion a process and policy such that ours can avoid being discounted as “don’t use those”. If you want to get involved in fashioning how they will work, please subscribe to the mail list and voice your opinion.<\/p>\n

A nice summary of the community discussions<\/a><\/p>\n

How You Can Help<\/strong><\/p>\n

We want to be the best distribution ever for our users, but we need your help. We use Bugzilla as our tracking tool to work packages through the update process. If you find a bug or are aware of a security issue, please open a bug (after checking if one doesn’t already exist) in bugzilla. The more concise the information you provide in the bug (patches, links to fixes or discussions of the issue), the more quickly one of our packagers will be able to issue an updated package to QA for testing<\/a> so that you can get the fix.<\/p>\n

Thanks For Your Patience and Support<\/strong><\/p>\n

We know some of you have been asking about updates and we haven’t forgotten. We’d like to think we cleansed a lot of bugs before issuing Mageia 1, but there are always a few more we’ve missed. Now that the process is in place for updates we hope to provide fixes in a timely fashion.<\/p>\n","protected":false},"excerpt":{"rendered":"

From Stew Benedict (aka stewb) If you’ve been using Mageia 1, you may have been wondering where all the updates are. It’s customary to get quite a few updated packages in the first month or so of a new distribution … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-921","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p159kA-eR","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/posts\/921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/comments?post=921"}],"version-history":[{"count":8,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/posts\/921\/revisions"}],"predecessor-version":[{"id":3337,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/posts\/921\/revisions\/3337"}],"wp:attachment":[{"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/media?parent=921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/categories?post=921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mageia.org\/en\/wp-json\/wp\/v2\/tags?post=921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}