El mié, 21-08-2013 a las 11:16 +0200, Tom Wijsman escribió: [...] > That's not what I am suggesting. > > It is not about bringing in new versions, but about getting rid of > OLD versions which LIKELY contain MORE security problems than you > imagine. Keeping them around for too long time isn't reasonable... >
I agree with seeing this problem, I guess it occurs because we (maintainers) usually forget about dropping old versions once last arch is done (probably because usually it takes long time to get all arches done). Maybe allowing all parties (maintainers, security and last arch team) cleanup old version could help :/ (I guess, there is no way to automatically notify maintainers about last arch doing the stabilization and, then, letting us drop it)