[jmm at inutil.org: Gnome / KDE updates for Etch and a half]

[Josselin Mouette]

Le lundi 12 novembre 2007 à 21:57 +0100, Moritz Muehlenhoff a écrit :
> Joss, Loic, Sebastian,
> I'm not sure if you're aware of the Etch and a half project and if you're
> subscribed, so I'm forwarding this to you. (Since you're the most active
> Gnome guys in Debian).

> Hi,
> I didn't make it to the IRC meeting, but I'd like to re-raise the topic
> of including KDE and Gnome backports with official security support:
> 
> If there is interest from Gnome/KDE maintainers, I think it would be
> feasible and we could offer a very solid desktop alternative to the
> Ubuntu hype:

> I don't know Gnome, so I'd like to know from one of the Gnome maintainers,
> which source packages were to be updated in a Etch and a half release,
> so that I can check myself.
> 
> (Speaking only for myself currently, I haven't talked to the rest of
> the Security Team yet, but given that we've extended our team recently
> and that we'll no longer have to support Sarge, I'm optimistic)

Security-wise, I don't think there is anything specifically problematic
to maintain in the GNOME platform and desktop. The screensaver is still
young and encountered a DSA recently, and there are sometimes issues in
the pixbuf loaders.

My concern would be more about backporting GTK+ 2.12, which is mandatory
if we want to see 2.20 in etch and a half. The list of Conflicts that
were added since etch is very long and still growing. It includes all
packages providing IM modules or engines because of the module ABI
change, but also several buggy packages that started crashing with 2.12,
including OOo and wxwidgets. Backporting GTK+ would mean at least
backporting these fixes for impacted packages and rebuilding all
packages providing IM modules or engines.

There is also epiphany, the latest version not having been tested with
the XUL version in stable.

Apart from that and a few library transitions, that should be fine.

Cheers,
-- 
 .''`.
: :' :      We are debian.org. Lower your prices, surrender your code.
`. `'       We will add your hardware and software distinctiveness to
  `-        our own. Resistance is futile.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Ceci est une partie de message
	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
Url : http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20071113/edc0fc7c/attachment.pgp