debian versions (was: package installation problem)

[Charles Hallenbeck]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Security patches are always made available for packages in stable as 
well as in testing. But new features will never be added to a stable 
package. That presents an interesting problem for including Mozilla in 
Sarge, since when the Mozilla folks release a new version it typically 
addresses security fixes but also adds new features. So the Debian folks 
are not sure how to handle this. It seems against the rules to update a 
stable package in a way that adds new features, and yet they have to keep 
it safe to use. Some folks have even argued that maybe mozilla should 
not even be included in Sarge for that reason, but of course it is.

The unstable release does not have any official security patches. There 
are security problems discovered sometimes of course, but those are 
fixed when found, and just not called security patches. A security patch 
is only issued for a package that has previously been released into 
either the testing or the stable distributions.

- -- 
The Moon is Waning Gibbous (64% of Full)
Get downloads from http://www.mhcable.com/~chuckh
  and remember, INFORMATION WANTS TO BE FREE!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFERqDdXnuiIOyDVQURAg5YAKCudhS3CBtagcKmQEHD9yx+ZiZAQwCfVCrP
FU5ppOiZ1mBYWsUctgznmMg=
=6ljA
-----END PGP SIGNATURE-----