From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on sa.int.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.2.3 X-Virus-Scanned: amavisd-new at localdomain Message-ID: <47CB3DFE.70400@solin.spb.ru> Date: Mon, 03 Mar 2008 02:53:34 +0300 From: Aleksey Avdeev User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050815) X-Accept-Language: ru-ru, ru MIME-Version: 1.0 To: ALT Linux Team development discussions References: <20080229222108.GA15942@granary.armor.altlinux.org> <20080229222609.GC9811@wo.int.altlinux.org> <20080301095057.GA21833@osdn.org.ua> <20080301102819.GQ32305@solemn.turbinal> <20080301181522.GH21833@osdn.org.ua> In-Reply-To: <20080301181522.GH21833@osdn.org.ua> X-Enigmail-Version: 0.93.0.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigD0DF10C1319490AD336F7D4A" Subject: Re: [devel] Q: apache2-2.2.8-alt1 %changelog X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Mar 2008 23:54:00 -0000 Archived-At: List-Archive: List-Post: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigD0DF10C1319490AD336F7D4A Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: quoted-printable Michael Shigorin =D0=C9=DB=C5=D4: > On Sat, Mar 01, 2008 at 01:28:19PM +0300, Alexey Tourbin wrote: >=20 >>>>=FE=D4=CF =C8=CF=D4=C5=CC =D3=CB=C1=DA=C1=D4=D8 =DC=D4=C9=CD %changel= og'=CF=CD =C5=C7=CF =C1=D7=D4=CF=D2? >>> >>>=E5=D3=CC=C9 =D0=D2=C1=D7=C9=CC=D8=CE=CF =D0=CF=CE=D1=CC (=CE=C5 =D0=D2= =C5=D4=C5=CE=C4=D5=C0 =D0=CF =D4=C5=C8=CE=C9=DE=C5=D3=CB=C9=CD =D0=D2=C9=DE= =C9=CE=C1=CD), >>>=D4=CF =CE=C1=D0=C9=D3=C1=CC =C2=D9 =D0=D2=C9=CD=C5=D2=CE=CF =D4=C1=CB= : >>>- 2.2.8: security fixes: >>> + CVE-2007-6421: XSS in mod_proxy_balancer (script injection) >>> + CVE-2007-6422: ... >>>- fixed #14601: suboptimal examples in conf/sites-available >>> (thanks dottedmag@) >>>- updated 2.2.6 patches =E7=CF=D4=CF=D7 =DA=C1=CC=C9=D4=D8 alt2, =D3 %changelog =DA=C1=CD=C5=CE= =A3=CE=CE=D9=CD =CE=C1 =D0=D2=C9=D7=C5=C4=A3=CE=CE=D9=CA =D7=D9=DB=C5... =E4=C5=CC=C1=D4=D8? >=20 > [=D5=C7=D5] >=20 >>Updating patches is pain in the ass that of maintainters, not >>that of users. Provided that patch was updated successfully, >>users don't care. >=20 >=20 > =EE=D5 =D7=CF=CF=C2=DD=C5-=D4=CF =C4=C1. =E1 =D3 =D5=D2=C5=DA=C1=CE=CE= =D9=CD =D7=C1=D2=C9=C1=CE=D4=CF=CD =D7=D9=DB=C5 =D4=D9 =D3=CB=CF=D2=C5=CA= > =D3=CF=C7=CC=C1=D3=C5=CE? >=20 >=20 >>Also I think that version update does not need >>detailed/explicit announce. Only local changes do. That said, >>I belive that changelog like this will do: >> >>* me >>- X.Y.Z (fixes CVE-1, CVE-2) >>- fixed WHAT (who helped, #1234) >>- fixed WHAT (who helped, #5678) --=20 =F3 =D5=D7=C1=D6=C5=CE=C9=C5=CD. =E1=CC=C5=CB=D3=C5=CA. --------------enigD0DF10C1319490AD336F7D4A Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iQEVAwUBR8s9/j0KZX1FX4J6AQLkaAf/XmM01dpzXef8P28ZP31UDys6SJfjGnQ2 2ddUPJUiW0usrCvD+y/WOe3GC0lMn596nkC6l4C33t5y6ogk4Yp3m7h7/H19kC6b tGFOoY0PeMETYdhI/Ti3Q2BIjecSoNtbx+RExICkrPJwvE+xWS0wbuG1AEjlPZyr gYWtjpwXXC6rs5Ihez0n9JkB7MM2Izc+7k+V7+zNnO312l+tFJdwlHfJJAx0rk9I JrSu+fmYM0tNPKp3nSvHuVpqLdOdDB7xXUMi3CFfCoE0nfHO7WZ1vTOY9Rpq1ec9 NAQ96WRzeeSwRtqq+d63hiiMB7AISN58F4BAkG1nPB4i9ioCVFZQcw== =5j0b -----END PGP SIGNATURE----- --------------enigD0DF10C1319490AD336F7D4A--