Re: Problem with OpenSCG downloads

From: Andres Freund <andres(at)anarazel(dot)de>
To: Justin Clift <justin(at)postgresql(dot)org>
Cc: PostgreSQL www <pgsql-www(at)postgresql(dot)org>
Subject: Re: Problem with OpenSCG downloads
Date: 2018-08-16 16:25:36
Message-ID: 20180816162536.5kfwz5wpnihuxswc@alap3.anarazel.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-www

On 2018-08-16 16:32:00 +0100, Justin Clift wrote:
> On 2018-08-16 16:25, Andres Freund wrote:
> > FWIW, I find this pretty damning given that there's been new security
> > release for a week: You've added no notes about it to the bigsql
> > download page. Pinged nobody, to get the downloadlinks temporarily
> > adorned with a warning on the pg site. And then there's the issue that
> > the dates besides the releases on the download page are referencing the
> > date of the newest set of minor releases, but aren't actually new.
> >
> > This is ridiculously intransparent.
>
> Is it fairly simple for us to just comment out/remove the links for now?
>
> We don't want to be pointing people to software with known security issues.
>
> We can put the links back in when the updated downloads are in place. :)

Probably don't want to remove them entirely, it might prevent people
from upgrading from an even older release with more serious issues. But
a red warning seems appropriate.

Greetings,

Andres Freund

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Alvaro Herrera 2018-08-16 16:36:29 Re: FailedAssertion on partprune
Previous Message Andres Freund 2018-08-16 16:05:08 Re: C99 compliance for src/port/snprintf.c

Browse pgsql-www by date

  From Date Subject
Next Message Stephen Frost 2018-08-16 18:58:36 Re: Missing mail list archive items
Previous Message Andres Freund 2018-08-16 16:05:08 Re: C99 compliance for src/port/snprintf.c