Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Jose Luis Tallón
El 14/05/12 12:03, Martin Bagge / brother escribió: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2012-05-13 14:54, Yves-Alexis Perez wrote: Wordpress upstream doesn't seem to be able to support a stable branch long enough for us (and I don't blame them for that, we do know how painful it

Re: openvz, was: Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Andrey Rahmatullin
On Mon, May 14, 2012 at 04:37:23PM +0200, Toni Mueller wrote: > > This reminds me: is anyone going to bring back vserver or openvz in some > > I'm for having openvz back, then. Are you ready to do the required work? > Can we have this in a separate thread, please? Do we have any practical results

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Marco d'Itri
On May 14, Toni Mueller wrote: > But in practice, it means that many users have to migrate, or abstain > from upgrading. Or will lxc be completely ready for Wheezy? No way, what is missing is important kernel features. The only hope is that somebody will maintain a decent .deb repackaging of the

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Toni Mueller
On Mon, May 14, 2012 at 03:53:25PM +0100, Ben Hutchings wrote: > On Mon, May 14, 2012 at 04:23:27PM +0200, Adam Borowski wrote: > > This reminds me: is anyone going to bring back vserver or openvz in some > > form? > Ola Lundqvist had plans to do this in an > OpenVZ-hosted repository. Sounds goo

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Ben Hutchings
On Mon, May 14, 2012 at 04:23:27PM +0200, Adam Borowski wrote: > On Mon, May 14, 2012 at 03:04:20PM +0200, Toni Mueller wrote: > > > to support in Debian; another is that it is really helpful for web > > > applications to be able to give an entirely independent installation to > > > each major site

openvz, was: Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Toni Mueller
On Mon, May 14, 2012 at 04:23:27PM +0200, Adam Borowski wrote: > This reminds me: is anyone going to bring back vserver or openvz in some I'm for having openvz back, then. Can we have this in a separate thread, please? Kind regards, --Toni++ -- To UNSUBSCRIBE, email to debian-devel-requ...@l

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Adam Borowski
On Mon, May 14, 2012 at 03:04:20PM +0200, Toni Mueller wrote: > > to support in Debian; another is that it is really helpful for web > > applications to be able to give an entirely independent installation to > > each major site rather than trying to share the same code. For another > > Ack. That

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Toni Mueller
On Sun, May 13, 2012 at 09:56:17AM -0700, Russ Allbery wrote: > packaging and security issues and is because we need N independent > installations per server for different groups that can vary separately and That's one reason why packaged versions of web apps are quite often useless at my workpla

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-14 Thread Martin Bagge / brother
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2012-05-13 14:54, Yves-Alexis Perez wrote: > Wordpress upstream doesn't seem to be able to support a stable branch > long enough for us (and I don't blame them for that, we do know how > painful it is). This pretty much sounds like the web browse

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Moritz Mühlenhoff
On Sun, May 13, 2012 at 02:54:40PM +0200, Yves-Alexis Perez wrote: > On sam., 2012-05-12 at 23:45 +0200, Bernd Zeimetz wrote: > > Being forced to upgrade to a new major version by a stable security support > > is > > nothing we should force our users to. Debian stable is known for (usually) > > pa

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Thomas Goirand
On 05/13/2012 05:32 PM, Russell Coker wrote: > There are lots of people who choose Wordpress because it seems to provide a > lot of features that other systems don't provide, which includes a > significant > set of free themes and plugins which are available from Wordpress.org (not in > Debian)

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Thomas Goirand
On 05/13/2012 08:12 PM, Toni Mueller wrote: > Hi, > > On Sun, May 13, 2012 at 11:26:26AM +0100, Ben Hutchings wrote: > >> The value is the same as for most packages: it's easy to install and >> easy to upgrade (I assume; I don't use Wordpress). Yes, the expected >> > if someone in Debian w

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Russ Allbery
Jon Dowland writes: > If we can't provide stable packages then I don't see what value we add > by packaging it at all. I wonder what the ratio of wordpress+debian > users is who use the package versus those that hand-install anyway, and > whether that is something that could ever be feasibly est

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Yves-Alexis Perez
On sam., 2012-05-12 at 23:45 +0200, Bernd Zeimetz wrote: > Being forced to upgrade to a new major version by a stable security support is > nothing we should force our users to. Debian stable is known for (usually) > painfree updates and bugfixes only, not for shipping completely new versions > wit

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Toni Mueller
Hi, On Sun, May 13, 2012 at 11:26:26AM +0100, Ben Hutchings wrote: > The value is the same as for most packages: it's easy to install and > easy to upgrade (I assume; I don't use Wordpress). Yes, the expected if someone in Debian would want to make that effort, I'd say that Wordpress and the li

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Bernd Zeimetz
On 05/13/2012 11:32 AM, Russell Coker wrote: > On Sun, 13 May 2012, Steve McIntyre wrote: >> Yes, it's difficult to work out. I'd also be worried by the >> (potential?) set of users who may just use Wordpress because it's >> already packaged and who therefore assume that it's likely to be a >> saf

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Ben Hutchings
On Sun, 2012-05-13 at 09:55 +0100, Jon Dowland wrote: > On Sun, May 13, 2012 at 11:13:05AM +1000, Russell Coker wrote: > > On Sun, 13 May 2012, Bernd Zeimetz wrote: > > > Being forced to upgrade to a new major version by a stable security > > > support > > > is nothing we should force our users t

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Russell Coker
On Sun, 13 May 2012, Steve McIntyre wrote: > Yes, it's difficult to work out. I'd also be worried by the > (potential?) set of users who may just use Wordpress because it's > already packaged and who therefore assume that it's likely to be a > safe option. Without that, they may just use something

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Steve McIntyre
Jon Dowland wrote: >On Sun, May 13, 2012 at 11:13:05AM +1000, Russell Coker wrote: >> On Sun, 13 May 2012, Bernd Zeimetz wrote: >> > Being forced to upgrade to a new major version by a stable security support >> > is nothing we should force our users to. Debian stable is known for >> > (usually) p

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-13 Thread Jon Dowland
On Sun, May 13, 2012 at 11:13:05AM +1000, Russell Coker wrote: > On Sun, 13 May 2012, Bernd Zeimetz wrote: > > Being forced to upgrade to a new major version by a stable security support > > is nothing we should force our users to. Debian stable is known for > > (usually) painfree updates and bugf

Re: Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-12 Thread Russell Coker
On Sun, 13 May 2012, Bernd Zeimetz wrote: > Being forced to upgrade to a new major version by a stable security support > is nothing we should force our users to. Debian stable is known for > (usually) painfree updates and bugfixes only, not for shipping completely > new versions with a forced mig

Bug#672695: wordpress: no sane way for security updates in stable releases

2012-05-12 Thread Bernd Zeimetz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: wordpress Severity: grave Version: 3.3.2+dfsg-1 [CC-in d-devel@l.d.o to discuss this] Hi, although I think the wordpress maintainer are doing all they can do to keep wordpress in a good shape in Debian, I do not think that it is possible