[devel] Q: apache2-2.2.8-alt1 %changelog

[Michael Shigorin]

On Sat, Mar 01, 2008 at 01:28:19PM +0300, Alexey Tourbin wrote:
> > > Что хотел сказать этим %changelog'ом его автор?
> > Если правильно понял (не претендую по техническим причинам),
> > то написал бы примерно так:
> > - 2.2.8: security fixes:
> >   + CVE-2007-6421: XSS in mod_proxy_balancer (script injection)
> >   + CVE-2007-6422: ...
> > - fixed #14601: suboptimal examples in conf/sites-available
> >   (thanks dottedmag@)
> > - updated 2.2.6 patches
[угу]
> Updating patches is pain in the ass that of maintainters, not
> that of users.  Provided that patch was updated successfully,
> users don't care.

Ну вообще-то да.  А с урезанным вариантом выше ты скорей
согласен?

> Also I think that version update does not need
> detailed/explicit announce.  Only local changes do.  That said,
> I belive that changelog like this will do:
> 
> * me
> - X.Y.Z (fixes CVE-1, CVE-2)
> - fixed WHAT (who helped, #1234)
> - fixed WHAT (who helped, #5678)

-- 
 ---- WBR, Michael Shigorin <mike на altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/