On ma, 23 tammi 2017, Martin Stransky wrote:
On 01/21/2017 04:33 PM, Christian Dersch wrote:


On 01/21/2017 04:15 PM, Kai Engert wrote:
I've disabled autokarma.
Thanks :)

The current Firefox 50.x will go unsupported on Tuesday, replaced by
Firefox 51.
Usually new important security fixes are contained in the new Firefox
update.

Unless we want to delay Firefox 51, this update must go out earlier,
or at the
same as Firefox 51.
Well, security fixes are one important point, possibly breaking things
in a stable release another one (I tend to think everything is fixed
now). Don't get me wrong, I don't want to slow down things, but NSS is a
widely used library, even in essential system components. I don't like
the idea of pushing it to stable without enough testing for some days
(lets say 4-5 days at minimum), especially as there were other issues
like non-working FreeIPA (which is fixed I guess?). First, the update
has to be pushed to testing (not happened right now) and has to arrive
@users, then they also should have some time to test. Some users like me
also test ealier by downloading the stuff from Koji, but in general that
is what we have updates-testing for. I'm a bit upset because I don't
like the idea of forcing "that has to happen until Monday" when there
might be side-effects like the one with FreeIPA. Firefox is not the only
thing in the world. If Firefox update is extremely urgent it should get
a bundled copy of nss until we have the update.

We should not break FreeIPA critically with that update (crashes on start or so) for sure. But don't expect rock solid experience from Fedora - there are RHEL/CentOS or other enterprise distros for that.
Breaking existing deployment should not be given a free ticket, I hope
this is clear. Breaking things while developing is expected, of course.

Fedora is focused mainly on new features which is the nss 3.28.1 update and minor bugs should be addressed later.
Do it in Rawhide and nobody will complain.

Overall, I'm fine with how the nss upgrade was coordinated --
we've got proper fixes to unblock FreeIPA in time, for example. But this
is not something that could be taken as granted, especially hurrying up
before conferences' travel season for most of involved in this event --
devconf.cz and FOSDEM take enormous travel/dedication time and make
fast turnaround for bug-fixing after the fact rather problematic.

--
/ Alexander Bokovoy
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Reply via email to