Bringing Mercurial (hg) into main

[Alexander Konovalenko-3]

I'm interested in having mercurial included into main for lucid.

The reason is plain: as a user, I need timely and professional updates
whenever a security vulnerability or a data loss bug is discovered in
Mercurial. That's all. But universe doesn't provide that.

Security support is essential because I will sometimes work with
untrusted data and servers (e.g. fetching some unfamiliar code for
review). Data loss bugs are an issue because I'm going to store some
of my code using Mercurial. (As far as I know, it is quite stable by
now, so such bugs are unlikely to occur.)

Is there anything that prevents Mercurial from entering main now?

How can I help?

 -- Alexander

--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

[Daniel Chen-2]

On Sun, Nov 8, 2009 at 9:31 AM, Alexander Konovalenko <alexkon@...> wrote:
> How can I help?

Since you've already expressed interest in mercurial, would you like
to keep abreast of it for universe security errata?

https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

[Alexander Konovalenko-3]

Daniel Chen <seven.steps@...> wrote:
> On Sun, Nov 8, 2009 at 9:31 AM, Alexander Konovalenko <alexkon@...> wrote:
>> How can I help?
>
> Since you've already expressed interest in mercurial, would you like
> to keep abreast of it for universe security errata?
>
> https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

I'm not sure I understand the question. Are you asking whether I'm
ready to maintain mercurial in universe security-wise? I'm not sure
what that involves either. Is it enough to request a sync from Debian
in Launchpad when a vulnerability is discovered and someone else will
quickly handle it? Or should I prepare, test and upload a package with
a fix?

--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

[Daniel Chen-2]

On Wed, Nov 11, 2009 at 2:14 PM, Alexander Konovalenko
<alexkon@...> wrote:
> I'm not sure I understand the question. Are you asking whether I'm
> ready to maintain mercurial in universe security-wise? I'm not sure
> what that involves either. Is it enough to request a sync from Debian
> in Launchpad when a vulnerability is discovered and someone else will
> quickly handle it? Or should I prepare, test and upload a package with
> a fix?

You (personally) don't need to "maintain" mercurial in Ubuntu -- those
sorts of efforts are better directed working within Debian's Python
Applications Packaging Team[0] -- unless you have a strong desire to.

That said, for stable and supported Ubuntu releases, the general
practice has been to backport fixes to the existing releases' source
packages. Familiarity with Debian packaging is a boon.

There are several members of Ubuntu MOTU who are happy to work with
you in keeping abreast of mercurial security errata if you're willing
to be vigilant. As always, it's a manpower issue.

HTH,
Dan

[0] http://qa.debian.org/developer.php?login=python-apps-team@...

--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

[Cibbao a]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Is it normal that apt want to remove all those packages??

cibbao@cibbao-desktop:/var/log$ sudo apt-get autoremove --purge mysql-common
Lettura elenco dei pacchetti... Fatto
Generazione albero delle dipendenze      
Lettura informazioni sullo stato... Fatto
I seguenti pacchetti saranno RIMOSSI:
  libmysqlclient16* libqt4-sql-mysql* librdf0* mysql-common* mysql-gui-tools-common* openoffice.org-base-core* openoffice.org-calc* openoffice.org-core*
  openoffice.org-draw* openoffice.org-emailmerge* openoffice.org-gnome* openoffice.org-gtk* openoffice.org-impress python-uno*
0 aggiornati, 0 installati, 14 da rimuovere e 0 non aggiornati.
1 non completamente installati o rimossi.
Dopo quest'operazione, verranno liberati 171MB di spazio su disco.
Continuare [S/n]?


Thanks

---

Crea e condividi i tuoi filmati con Movie Maker
--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

[Martin Pitt-4]

Hello Cibbao,

Cibbao a [2009-11-16 13:45 +0100]:
> Is it normal that apt want to remove all those packages??

Yes, it is. Don't do it if you need any of them. :)

Martin

--
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

--
ubuntu-devel mailing list
ubuntu-devel@...
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel