Next kernel security release hell

[Fabio Massimo Di Nitto]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi guys,
	I have basically completed the packages that will hit warty/hoary/breezy in
- -security.

There are two problems I need help to address:

1) this huge update requires deep testing, because the changes are intrusive and
that means covering all 3 main arches on all 3 releases in as many flavours as
possible. I simply don't have hw available to cover everything here.

2) due to the nature of the changes, there is a kernel ABI bump in all 3
releases. AFAIK we never had this situation before and this drag in the problem
of uploading linux-restricted-modules and linux-meta.
We did never agree (or talk) if the rebuild of the latters should be done via
- -security or -updates.
I personally would like to see them entering the same suite (-security) as the
kernel even if they do not contain security updates themself. Any objection?
Better ideas?

Colin: AFAIR warty did not build udeb from the kernel itself. I assume we will
not need to update d-i, but for a person that has -security in his sources.list
it will make one package unbuildable (the one that was doing deb -> udeb
conversion and i can't remember the name)
How should we address this problem IF we have to address it.

Fabio

- --
I'm going to make him an offer he can't refuse.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQIVAwUBQ3x9sFA6oBJjVJ+OAQJ54g/7BvyjUcXzMCQx+d8xlvYu18chK/ufLmZP
+69NvNZzTmxky+zv3Sj3/vh/Zt99AQHWHf+vNyARlezTcIKbML6GNeKMVw88QROD
KzEowTVQAy0A1moWQrlxzFqblkxskbueiRD5Jh8sXs+X8E6Rfa2ELF4c5Ws9/c2l
u7oF+tMXreUCRe9kua/7Ed/SPkAZ8qnQqbyZVo2buKk7lmSa38ZKTmHYM9E3XMSS
cM6LKqOR98/1v69pF9Kx4zljTYkHbjh8LxmHtrML2K+TIXuj45KQ77kaocmDVpZA
zErtHocnkq4rpWUhZiD0e6DiZmRVUn/EjeDeDaOJCd7PFhdBhA9jtO61XPJ45q+7
012LH92khYghEEgR910AQ+jecv5bfU+GOQAKBDpUfXMkcj9xWkE7YKOthlGsV5wy
1OR47bUoSJhLDnWsFMYCL5hp8iSWUmcbH5SOVfCSQC9wtEXrbfffhJ4C9ao5V+Vl
lzEuJjY9OEuzEYpMl2dGj7XiSCEiTZDDtkQlbU6hhx4ZXi3eJUHwCkr18GcRGEBD
bhW1G0PnMzo8A+38cYtMfG/JCvws75SAXwCHdnKrjDUDQeuRnJXXUkqcirKy42jt
4g2ZDXxh+BhB5+J1IWgfXrfoSoUBU0GFLkdAYerDzVBWT434q1mJ8AX34Z4ZVbN9
kF9ncKS2jqk=
=JaK8
-----END PGP SIGNATURE-----