Hello,
I'm trying to make a server update from 1.5.8 to 1.6.3 but have difficulties with this, so I tried to install materials straight from my distribution (SUSE Linux 10.0)
this is the SUSE Linux stable one.
after installing and update to the very last security updates, I ended up with mediawiki 1.4.7 (not sure of the "7")
so my question:
how long do you plan to make security updates on old products? I wonder if a 1.4 will still be secure :-) and how long :-)
I work hard with opensuse, so I can report there any problem.
thanks jdd
jdd wrote:
after installing and update to the very last security updates, I ended up with mediawiki 1.4.7 (not sure of the "7")
so my question:
how long do you plan to make security updates on old products?
About a year, generally.
I wonder if a 1.4 will still be secure :-) and how long :-)
1.4.0 was released March 20, 2005, a bit over a year ago. The most recent fix release on 1.4 is 1.4.14, released January 19, 2006.
-- brion vibber (brion @ pobox.com)
Brion Vibber wrote:
jdd wrote:
after installing and update to the very last security updates, I ended up with mediawiki 1.4.7 (not sure of the "7")
so my question:
how long do you plan to make security updates on old products?
About a year, generally.
thanks jdd
Moin,
On Sunday 23 April 2006 09:29, jdd wrote:
Brion Vibber wrote:
jdd wrote:
after installing and update to the very last security updates, I ended up with mediawiki 1.4.7 (not sure of the "7")
so my question:
how long do you plan to make security updates on old products?
About a year, generally.
I also saw that SuSE 10.0 has 1.4.7, it is simple a problem of long overlapping release cycles. When they bundles mediawiki (I was astonished that they do), they take whatever is there at the time they go into a freeze. Half a year later, it's completely outdated.
However, as far as SuSE goes, they have an active security patching going on, and if mediawiki x.y.z is part of their system, you should ask them to backport security patches for it (or release a new onem). I don't know what the exact timeframe for SuSE is, but they provide security patches for quite old installations.
I don't know what 10.1 will contain, but I doubt it is mediawiki 1.6.3 (one can hope, though :)
Unfortunately, 10.1 is already late, and 10.2 (or 11.0) will arrive in like 6..9 months and until then people using SuSE will be stuck with whatever they stick on their DVD.
Well, or use the latst mediawiki, like I did :-D
Best wishes,
Tels
http://lists.opensuse.org/archive/opensuse/2006-Apr/0615.html
answer from SUSE jdd
mediawiki-l@lists.wikimedia.org