Recent Upgrade to Bugzilla 3.2.4

[Christian Nolte]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I am running a production Bugzilla-Server on CentOS 5.3. Just a few
hours ago a update for the bugzilla-3.0.2 EPEL-Package has been pushed
out, which has wasted my production system, because some of the
dependencies perl-CGI, perl-Email-MIME cannot be met, and even worse:
There is manual interaction necessary to upgrade the installation.

I guess that this happened accidentally, because I thought that there
would be a stricter update policy for EPEL so that a production system
won't get into problems.

Can anyone confirm this problem?

Best regards,
Christian

- --
"He's a lonely white trash sorceror trapped in a world he never made.
 She's a wealthy mute vampire with a flame-thrower. They fight crime!"

> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkpfGsgACgkQCNjA0nfhW7xfTQCgkM4OlxDkRqjus8LC96P/MdwH
> EnAAoIs7tC1ljPZyO5xEcLap2WbyqqYp
> =dIxu
> -----END PGP SIGNATURE-----

[Dennis Gilmore]

On Thursday 16 July 2009 07:19:23 am Christian Nolte wrote:
>  Hi,
>
>  I am running a production Bugzilla-Server on CentOS 5.3. Just a few
>  hours ago a update for the bugzilla-3.0.2 EPEL-Package has been pushed
>  out, which has wasted my production system, because some of the
>  dependencies perl-CGI, perl-Email-MIME cannot be met, and even worse:
>  There is manual interaction necessary to upgrade the installation.
>
>  I guess that this happened accidentally, because I thought that there
>  would be a stricter update policy for EPEL so that a production system
>  won't get into problems.
>
>  Can anyone confirm this problem?
>
>  Best regards,
>  Christian 
It was pushed to stable because it addressed a security issue.  i was
able to 
install it fine here on my centos 5 box. without broken dependencies. but i 
cant attest to steps needed for upgrading the installation.

Dennis

[itamar]

the 3.0.2 version have alot of security issues.

you should wast some time upgrading

if you need help contact me at google talk or skype



On Thu, Jul 16, 2009 at 9:19 AM, Christian Nolte<ch.nolte(a)noltec.org> wrote:
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>
>  Hi,
>
>  I am running a production Bugzilla-Server on CentOS 5.3. Just a few
>  hours ago a update for the bugzilla-3.0.2 EPEL-Package has been pushed
>  out, which has wasted my production system, because some of the
>  dependencies perl-CGI, perl-Email-MIME cannot be met, and even worse:
>  There is manual interaction necessary to upgrade the installation.
>
>  I guess that this happened accidentally, because I thought that there
>  would be a stricter update policy for EPEL so that a production system
>  won't get into problems.
>
>  Can anyone confirm this problem?
>
>  Best regards,
>  Christian
>
>  - --
>  "He's a lonely white trash sorceror trapped in a world he never made.
>   She's a wealthy mute vampire with a flame-thrower. They fight crime!"
>
> >  -----BEGIN PGP SIGNATURE-----
> >  Version: GnuPG v1.4.9 (GNU/Linux)
> >  Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> >
> >  iEYEARECAAYFAkpfGsgACgkQCNjA0nfhW7xfTQCgkM4OlxDkRqjus8LC96P/MdwH
> >  EnAAoIs7tC1ljPZyO5xEcLap2WbyqqYp
> >  =dIxu
> >  -----END PGP SIGNATURE----- 
>  _______________________________________________
>  epel-devel-list mailing list
>  epel-devel-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/epel-devel-list
>  


-- 
------------

Itamar Reis Peixoto

e-mail/msn/google talk: itamar(a)ispbrasil.com.br
sip: itamar(a)ispbrasil.com.br
skype: itamarjp
icq: 81053601
[phone]
[phone]

[Xavier Bachelot]

>  the 3.0.2 version have alot of security issues.
>
>  you should wast some time upgrading
>
>  if you need help contact me at google talk or skype
>  
The problem is not about wasting some time upgrading, even if you kindly
provide online support :-) It's about silently breaking a previously
working setup. The EPEL policy says update without a transparent upgrade
path should be avoided by all means and that security fixes should
preferably be backported. Granted, this is not always possible, but then,
the incompatible update should at least be advertised on the epel-announce
list, possibly with hints on how to ease the transition. At least, that's
my understanding of the policy.

Regards,
Xavier

>  On Thu, Jul 16, 2009 at 9:19 AM, Christian Nolte<ch.nolte(a)noltec.org>
>  wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi,
> >
> > I am running a production Bugzilla-Server on CentOS 5.3. Just a few
> > hours ago a update for the bugzilla-3.0.2 EPEL-Package has been pushed
> > out, which has wasted my production system, because some of the
> > dependencies perl-CGI, perl-Email-MIME cannot be met, and even worse:
> > There is manual interaction necessary to upgrade the installation.
> >
> > I guess that this happened accidentally, because I thought that there
> > would be a stricter update policy for EPEL so that a production system
> > won't get into problems.
> >
> > Can anyone confirm this problem?
> >
> > Best regards,
> > Christian
> >
> > - --
> > "He's a lonely white trash sorceror trapped in a world he never made.
> >  She's a wealthy mute vampire with a flame-thrower. They fight crime!"
> >
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1.4.9 (GNU/Linux)
> > > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> > >
> > > iEYEARECAAYFAkpfGsgACgkQCNjA0nfhW7xfTQCgkM4OlxDkRqjus8LC96P/MdwH
> > > EnAAoIs7tC1ljPZyO5xEcLap2WbyqqYp
> > > =dIxu
> > > -----END PGP SIGNATURE----- 
> >
> > _______________________________________________
> > epel-devel-list mailing list
> > epel-devel-list(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/epel-devel-list
> >
>
>
>
>  --
>  ------------
>
>  Itamar Reis Peixoto
>
>  e-mail/msn/google talk: itamar(a)ispbrasil.com.br
>  sip: itamar(a)ispbrasil.com.br
>  skype: itamarjp
>  icq: 81053601
>  [phone]
>  [phone]
>
>  _______________________________________________
>  epel-devel-list mailing list
>  epel-devel-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/epel-devel-list
>

[Christian Nolte]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Xavier Bachelot schrieb:
> > the 3.0.2 version have alot of security issues.
> >
> > you should wast some time upgrading
> >
> > if you need help contact me at google talk or skype
> >
>  The problem is not about wasting some time upgrading, even if you kindly
>  provide online support :-) It's about silently breaking a previously
>  working setup. The EPEL policy says update without a transparent upgrade
>  path should be avoided by all means and that security fixes should
>  preferably be backported. Granted, this is not always possible, but then,
>  the incompatible update should at least be advertised on the epel-announce
>  list, possibly with hints on how to ease the transition. At least, that's
>  my understanding of the policy. 
Yes. I absolutely second that!

Thanks for the kind offer for help, though. I did manage to upgrade the
installation.

- --
"He's a world-famous shark-wrestling astronaut gone bad. She's a
 psychotic cat-loving vampire with a knack for trouble. They fight
 crime!"

> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkpfQYAACgkQCNjA0nfhW7woKACg2vLKuBU2hgz+BcrJYCef59og
> I2cAoP9BkCcmHs7lMRVMWGltRHpYs7GT
> =1lWV
> -----END PGP SIGNATURE-----