From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id GZCzLp82WmA1GAAA0tVLHw (envelope-from ) for ; Tue, 23 Mar 2021 18:42:39 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id kEEEKp82WmBoGwAAB5/wlQ (envelope-from ) for ; Tue, 23 Mar 2021 18:42:39 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2F7EEB639 for ; Tue, 23 Mar 2021 19:42:39 +0100 (CET) Received: from localhost ([::1]:55540 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lOlzC-0005s6-1i for larch@yhetil.org; Tue, 23 Mar 2021 14:42:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:43204) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lOl3n-0003cF-FK for guix-devel@gnu.org; Tue, 23 Mar 2021 13:43:20 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:39307) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lOl3R-0004KL-O0 for guix-devel@gnu.org; Tue, 23 Mar 2021 13:43:19 -0400 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 0236E5C0057; Tue, 23 Mar 2021 13:42:56 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 23 Mar 2021 13:42:56 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=FcJS6q8ASx9HGdYP+2DCRjks 4a60J0NoG0Q4PK57GBg=; b=nf1mWNT1hEAQXg41yLff0buYmiElEEZKetsb/X3G vtSQ39F3dikJYVL68aMHcjPf3z4n4Juatc5Ta5xjrcMWvpCfp/rIwgu0Eja6OlcL EivSc+c7poz3ZT9ooaV5/t5udqvc5G0mvpGyZeLoQReVlpGuExMtUxpLiRdxgyUs aNc= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=FcJS6q 8ASx9HGdYP+2DCRjks4a60J0NoG0Q4PK57GBg=; b=qdfsEWEVH2ZH2t8EUicJmL QdA8Cr8j9amea+TnN7pY2Ra3sLomY8WOG/dX/vpvF6re4sVk0g3Uj0JGEXzbjpSV H0FsI8vFOfDj0NQq3SvhEenJhSiVGHVsLEPuosbN1Mgc5euw/KNCRjfrMGcWk0Zd W09G6YcKIBeMHBbADHE7PynoAiaubkoWEAeYW1FPMSGygqyu0MQXvElGuUdTLhza mcUPOcvTKuGiUy4rbgP7P9WCK+6CMkdFl0BcnSMz42O56ksJyBotpsYT1ZBo/gfU lfoETrA7otmz1u5T8WMvndfgx5YY6fgTun0rK7qoy2S1yBS64fYwNYj6qvkWDVuA == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudegiedguddtgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggujgesghdtreertddtudenucfhrhhomhepnfgvohcu hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth htvghrnhepudfhffevhedtgfejveelfeeukefhtddvffetgeeuiefgvedvkeefieejfffg ffelnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA id 9E965108005F; Tue, 23 Mar 2021 13:42:54 -0400 (EDT) Date: Tue, 23 Mar 2021 13:42:53 -0400 From: Leo Famulari To: =?iso-8859-1?B?TOlv?= Le Bouter Subject: Re: imagemagick@6.9.11-48 to graft or not to graft with 6.9.12-2 Message-ID: References: <87v99iki3l.fsf@netris.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="PaF3XlHlsZOEkaGb" Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=66.111.4.28; envelope-from=leo@famulari.name; helo=out4-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616524959; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=FcJS6q8ASx9HGdYP+2DCRjks4a60J0NoG0Q4PK57GBg=; b=gmsfHTY+2mFjVhK0oqfWyKxdRjhYIR0mMiXwWysoVdHFBTNMWeZLp9SYWBalf5CWT8Bgyn 8IaF+kwsdAdmgoWlAIVRS8TtQ/xZ358vbHkDVO16TU/KCF3MXlLky36XwkKw+RplVwhn7U /zZ1w22dPJiwineiXy7HFA12EyWUjykaEAQjlZAjRo7oaUMYDD8P/YRCnBGzK+Cnlx+g9R WNZLHndIDET8KNQiEfVUNoivYHpVQJfI4oCKTHqmf8DjN0mlGhmik4mssMvN4gOKcprU2a QMRUJdwK4iyOw7fKl2RiZ/b0vF5kCo7Eex/HmMIqtWCM+tWmbxQX1a+k8ctKLg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616524959; a=rsa-sha256; cv=none; b=XvBoMLoFlkca3b0RuOHXZ2gOp2ny2uEsR06uP+q5VtWnEJ4gdvfaJQ59/E8txypDo9trY0 mEyFuTZOnefFKtf+EPWBqPZNpvJxJsYaYekJY4Fh4a23VBZyJ2A9rvO+bZlMmcrB3xnvj+ 9pebb9qYCJ5RImQJCUk9ZcCWdt6v8HlN4RGt8aZAbbHEJoWsejsGJxqycqUSmdMakBhLJs UMJCU7eW3j64uPt2HMQaSH3jKgsisUQfWm/BpeR9l3ZVs0poX65JAZ1d2v15IsrlXDmO5a 1U8VkXlEv7am/SnDgNCqXAN0ifdjJNdzQX9u+4OTAWDRhV6SEwcWilC+An2XxQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=nf1mWNT1; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=qdfsEWEV; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -3.52 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=nf1mWNT1; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=qdfsEWEV; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 2F7EEB639 X-Spam-Score: -3.52 X-Migadu-Scanner: scn0.migadu.com X-TUID: C5u4g30m/A8M --PaF3XlHlsZOEkaGb Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 23, 2021 at 02:34:52PM +0100, L=E9o Le Bouter wrote: > In general my opinion is that backporting fixes is time-consuming and > that if we have to do it each time I wont be able to keep up with the > load. I'd rather update things to a version that already includes fixes > and is supported by upstream even at the cost of world rebuilds. I > can't deal with upstreams who either do not backport fixes, or don't > integrate fixes at all. I agree, backporting is more time-consuming (and energy-consuming) than upgrading. But, you don't have to keep up with the load. We can only do our best, and it's important for each of us to find a level of commitment that we are able to sustain. When we compare Guix to other volunteer distros, there have been times when Guix did more security updates than any other distro, and times when we were average, and then times when we were below average. At no time did I perceive that it made a difference to how many people use Guix. Ultimately, I think the winning strategy is to work in a way that makes it easy for other people to help. For example, by filing bug reports about security updates being available, so that others can write the patches. The idea is that, over time, we will build a team of people writing security update patches. --PaF3XlHlsZOEkaGb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAmBaKJ0ACgkQJkb6MLrK fwjK7RAAjgi3hFwy/ALmORld8LyKX1bPvZDWN1K2S6gX1oeddJoIHIWFFTB8wvBA 048LsXPFwKLCbVIIo8iVgqvDt2oCBy/4D1FTaCUae3Fsd3CumRxvYxtSgX+2X6iU 69z/fWYttFOcpsRunNXivK6st5wgUJcqGCssEwdX75oSU9a7Iz/+O8ECq0LxQ5O5 cbF1OyvZOSashdOgWmUmHxPImM8756W0BXj+0rrGCSz7uNSOVVB33+Hx/ScZIUJ5 tRL73DPeBIr+Al3Ualc6qqRtRr56KmI8vv/ljDOoLGQPGEN1MDGEhQvJyAW6z3vD r5Ellz0Bz6jXcAS3wH+rCcIpEu5zv9cUN/2EK2Qa1XEKZ3SIo1CSgZ8cgr71J1EM lbg+vT+e2k7QQBlCDFmzDPL0FjlxFUS/afGMmPiSdr07QRt4675RGVibOoAR+AOv JMCZZJ7Sp831zUrmi5OwzrTLB2oFYeRUEw2KnLLY1/ITwL9xSKmsf4SLRBWsVFGv iZDWwCo4VI4EGjH0qjF4gWLNbZmp82bJPS7Pz0Gb3axgExmQsROCic+r4ygApmcq pP1sA54UyzA4Pw5Wk1K8L1HmoidGSvqQ/jAZkszpyy4q0/700JVagsvh4mJOQqRD 1/5HN2RwG9gFpGWuc3i4LlIwLvmxNA3TGU7AsBUhyq6VNFvDu08= =6TmV -----END PGP SIGNATURE----- --PaF3XlHlsZOEkaGb--