Re: Packages security updates in -stable

2017-09-11 Thread Stuart Henderson
On 2017-09-09, Lukasz Jendrysik wrote: > Hello, > > Since the main goal of OpenBSD is security, I keep wondering about one > thing. > There are packages like irssi or Thunderbird that should be updated to > the newest upstream version. > For example irssi's upstream encourages all users to upgra

Re: Packages security updates in -stable

2017-09-09 Thread Daniel Jakots
On Sat, 9 Sep 2017 21:16:36 +0200, Lukasz Jendrysik wrote: > Similar situation with Chromium etc. All of those packages exists in > newer versions in -current, but it's not an option in my case. > > I understand that -stable is not place for the latest packages > available and it's expected to

Re: Packages security updates in -stable

2017-09-09 Thread Lukasz Jendrysik
On 09/09/2017 22:23, Theo de Raadt wrote: For example irssi's upstream encourages all users to upgrade to the newest one, see: https://irssi.org/2017/07/07/irssi-1.0.4-released/ Similar situation with Chromium etc. All of those packages exists in newer versions in -current, but it's not an opti

Re: Packages security updates in -stable

2017-09-09 Thread Theo de Raadt
> >> I understand that -stable is not place for the latest packages available > >> and it's expected to be rock solid, but also secure. > The thing is that mentioned packages are already updated in MAIN. Twice the work == twice the work. > I'm curious how looks the process of merging package upda

Re: Packages security updates in -stable

2017-09-09 Thread Theo de Raadt
> Since the main goal of OpenBSD is security, I keep wondering about one > thing. > There are packages like irssi or Thunderbird that should be updated to > the newest upstream version. These two sentences don't make sense together. You equate "update update" with security. That doesn't make s