Hello, Everyone,

Are there solid arguments for stabilizing any version of gentoo-sources?  I 
think the valid arguments for not stabilizing gentoo-sources can be garnered 
from the thread about not stabilizing vanilla-sources[1].  

This is in no way complaining about how long it takes to stabilize a kernel. 
It's just a fact that by the time we do stabilizing one, there might be many, 
many kernel versions released for that 3.X branch that contains security fixes 
for which the stable version will not have.  Kernel versions are coming out 
1-2 a week at this point.

I feel we are giving users a false sense of security, and maybe it would be 
better for them to upgrade faster than they are doing now if they are only 
using stable kernels.

Having stable kernels around keeps me from deleting these old, potentially 
vulnerable releases.[2]

Mike

[1] http://marc.info/?l=gentoo-kernel&m=137182668616082&w=2
[2] http://packages.gentoo.org/package/sys-kernel/gentoo-sources


-- 
Mike Pagano
Gentoo Developer - Kernel Project
Team Lead - Gentoo Sources
E-Mail     : mpag...@gentoo.org
GnuPG FP   : EEE2 601D 0763 B60F 848C  9E14 3C33 C650 B576 E4E3
Public Key : http://pgp.mit.edu:11371/pks/lookup?search=0xB576E4E3&op=index


Reply via email to