-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
another thing that might influence package maintenance at least for stable are 
the point releases. What packages qualify for updates in a point release? What 
is the difference to a major release (which is more or less the same question I 
guess)? All these questions arise because the time potato was released was 2000 
and woody 2002. That's two years. So that makes me assume that the point 
releases include package updates as well and not just the acumulated security 
fixes. What worries me is packages like gnupg in version 1.0.6 on woody. I 
think that it would be really important to stay extra current with packages 
like this one. I have noticed that the trustdb.gpg database changed for example 
because of a security risk. Is that being honored by Debian at all? What is the 
procedure regarding such things?

Regards,
Volker Sturm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)

iD8DBQE+Y95bjJsnsD0ou00RAuFfAJ0f/C8lPBf0GRX5/oxo8jEEKHuyVQCfUPZP
OW7XUBSVg+3lGjM7UF6F9hs=
=+Es6
-----END PGP SIGNATURE-----

Reply via email to