From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Upcoming OpenSSL updates Date: Wed, 24 May 2017 13:39:17 +0200 Message-ID: <878tlm4h7e.fsf@gnu.org> References: <20170523044002.GA13076@jasmine> <20170523175545.GB18648@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:52303) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dDUdR-0000GZ-Ur for guix-devel@gnu.org; Wed, 24 May 2017 07:39:26 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dDUdN-0004M0-6f for guix-devel@gnu.org; Wed, 24 May 2017 07:39:26 -0400 In-Reply-To: <20170523175545.GB18648@jasmine> (Leo Famulari's message of "Tue, 23 May 2017 13:55:45 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari skribis: > On Tue, May 23, 2017 at 12:40:02AM -0400, Leo Famulari wrote: >> On May 25 between 1200=E2=80=931600UTC, OpenSSL will release some bug-fix >> updates: >>=20 >> https://mta.openssl.org/pipermail/openssl-announce/2017-May/000098.html >>=20 >> Apparently, none of the fixes are for security problems. >>=20 >> However, I still think we should apply the update of openssl@1.0.2 with >> a graft, if the ABI is unchanged, unless none of the changes are >> relevant for GNU / Linux systems. > > I thought about it some more, and now I'm not so sure we should start > grafting non-security related bug fixes, in general. For this case, > let's see what the changes are. Same here. I think we should reserve graft for security fixes, or otherwise serious bug fixes. I=E2=80=99m surprised that they announce bug-fix-only releases in this way. Ludo=E2=80=99.