Re: [opensuse-factory] Re: commit typo3-cms-4_5 for openSUSE:Factory
Hello Marcus,
On Wed, 28 Nov 2012 15:41:02 +0100: Marcus Meissner wrote
Thomas,
- Multiple versions of Typo3 CMS? Really? Why not just one?
As I wrote in the SR theese three versions are the most used versions in the web. Because of incompatibility of some extensions with the newest version TYPO3 CMS users dom't also use the two older versions of TYPO3 CMS. In general you can say: Users want to use the versions down to the latest LTS version (LTS = Long Term Support). Currently this is TYPO3 CMS v4.5 and they want to use it in parallel on one server (depending on the extensions their site needs and with which version this extensions will work). So the user needs some flexibility in choosing the version branch and I think versions 4.5, 5.6, 4.7 will be quite good. Before the next openSUSE release the TYPO3 community will release a typo3 version 6.0. I currently don't know if it'll be good to deliver also this version, but seems to better wait for openSUSE 13.1 to deliver TYPO3 CMS 6.0.
- As these are high-security-turnaround packasges, will you maintain them for the 18 months longer openSUSE is under official support?
Of couse I will. I've worked with TYPO3 CMS for years I'll also use it in the future, even in business situations. So I'll permanently watch the TYPO3 releases and I'll pack them soon as an security update. Oliver Hader (TYPO3 CMS v4 Core Leader) thinks about an automation when they release a new fix. This will be possible 'cause my spec files are designed to work properly with only changing version and revision in _service file. So it will be possible that the TYPO3 community automatically adapts the _service file and sends the submit request.
Also given the high amount of security issues, we would appreciate if you can help the security team there too with actively notifying us :/
I'll do. Greets, Thomas -- Mit freundlichen Grüßen, Thomas Worm ****************************** Thomas Worm Handel & Dienstleistung Postfach 2207 D-90009 Nürnberg Hausanschrift: Hintere Cramergasse 3 D-90478 Nürnberg ****************************** Telefon: +49 1803 030505000* Telefax: +49 1803 030505050* * 9 Ct./Min. aus dem dt. Festnetz, max 42 Ct./Min aus dem dt. Mobilfunknetz, andere Netze abweichend Allgemeiner Kontakt: info@thomas-worm.de Buchhaltung: buchhaltung@thomas-worm.de ****************************** Geschäftsführer: Thomas Worm thomas.worm@thomas-worm.de Kontoverbindung: Inhaber: Thomas Worm H. u. D. Kontonummer: 38 56 38 Bankleitzahl: 760 606 18 Kreditinstitut: Volksbank-Raiffeisenbank Nürnberg eG Steuernummer: 240-290-21429 USt-ID: DE250745940 ISBN-Verlagsnummer: 3-86749 ****************************** -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hi Thomas, Thanks for the information! I am happy then and hope for not much security troubles ;) Ciao, Marcus On Thu, Nov 29, 2012 at 07:01:24PM +0100, Thomas Worm wrote:
Hello Marcus,
On Wed, 28 Nov 2012 15:41:02 +0100: Marcus Meissner wrote
Thomas,
- Multiple versions of Typo3 CMS? Really? Why not just one?
As I wrote in the SR theese three versions are the most used versions in the web. Because of incompatibility of some extensions with the newest version TYPO3 CMS users dom't also use the two older versions of TYPO3 CMS. In general you can say: Users want to use the versions down to the latest LTS version (LTS = Long Term Support). Currently this is TYPO3 CMS v4.5 and they want to use it in parallel on one server (depending on the extensions their site needs and with which version this extensions will work). So the user needs some flexibility in choosing the version branch and I think versions 4.5, 5.6, 4.7 will be quite good. Before the next openSUSE release the TYPO3 community will release a typo3 version 6.0. I currently don't know if it'll be good to deliver also this version, but seems to better wait for openSUSE 13.1 to deliver TYPO3 CMS 6.0.
- As these are high-security-turnaround packasges, will you maintain them for the 18 months longer openSUSE is under official support?
Of couse I will. I've worked with TYPO3 CMS for years I'll also use it in the future, even in business situations. So I'll permanently watch the TYPO3 releases and I'll pack them soon as an security update. Oliver Hader (TYPO3 CMS v4 Core Leader) thinks about an automation when they release a new fix. This will be possible 'cause my spec files are designed to work properly with only changing version and revision in _service file. So it will be possible that the TYPO3 community automatically adapts the _service file and sends the submit request.
Also given the high amount of security issues, we would appreciate if you can help the security team there too with actively notifying us :/
I'll do.
Greets, Thomas
--
Mit freundlichen Grüßen, Thomas Worm
******************************
Thomas Worm Handel & Dienstleistung Postfach 2207 D-90009 Nürnberg
Hausanschrift: Hintere Cramergasse 3 D-90478 Nürnberg
******************************
Telefon: +49 1803 030505000* Telefax: +49 1803 030505050*
* 9 Ct./Min. aus dem dt. Festnetz, max 42 Ct./Min aus dem dt. Mobilfunknetz, andere Netze abweichend
Allgemeiner Kontakt: info@thomas-worm.de
Buchhaltung: buchhaltung@thomas-worm.de
******************************
Geschäftsführer: Thomas Worm thomas.worm@thomas-worm.de
Kontoverbindung: Inhaber: Thomas Worm H. u. D. Kontonummer: 38 56 38 Bankleitzahl: 760 606 18 Kreditinstitut: Volksbank-Raiffeisenbank Nürnberg eG
Steuernummer: 240-290-21429 USt-ID: DE250745940 ISBN-Verlagsnummer: 3-86749
****************************** -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-- Open Linux Security Engineer Position at SUSE: http://bit.ly/Li4RbS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hello, Am Freitag, 30. November 2012 schrieb Marcus Meissner:
On Thu, Nov 29, 2012 at 07:01:24PM +0100, Thomas Worm wrote:
of TYPO3 CMS. In general you can say: Users want to use the versions down to the latest LTS version (LTS = Long Term Support). Currently this is TYPO3 CMS v4.5 and they want to use it in parallel on one server (depending on the extensions their site needs and with which version this extensions will work). So the user needs some flexibility in choosing the version branch and I think versions 4.5, 5.6, 4.7 will be quite good. Before the next openSUSE release ^^^ I assume you meant 4.6 here?
the TYPO3 community will release a typo3 version 6.0. I currently don't know if it'll be good to deliver also this version, but seems to better wait for openSUSE 13.1 to deliver TYPO3 CMS 6.0.
6.0 was released in the meantime, and I see no reason to wait for openSUSE 13.1 to ship it. We have some months left until 12.3 is released, so it should be stable until then. Besides that, my experience with Typo3 is that releases are always stable, so the risk of shipping Typo3 6.0 is very low IMHO. OTOH, please keep the upstream end of maintenance in mind. "End of maintenance" dates (as specified on typo3.org/download/) are: - 4.5: 2014-04 - 4.6: 2013-04 (!) - 4.7: 2013-10 - 6.0: 2014-04 Every openSUSE release comes with 18 months[1] of "official" security updates, but especially Typo3 4.6 has a very short upstream support which ends shortly after the openSUSE 12.3 release. Regards, Christian Boltz [1] 2 releases + 2 months, to be exact -- Nö, "gehackt" wurde hier noch nie, soweit mir das bekannt ist. Was ehrlichgesagt bei WordPress fast ein bisschen verblüffend ist. :-) [fh in einem Kommentar auf http://www.lawblog.de/index.php/archives/2011/06/15/korrigiert/] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (3)
-
Christian Boltz -
Marcus Meissner -
Thomas Worm