Am 01.08.2014 um 22:08 schrieb Tomas Hoger:
On Thu, 31 Jul 2014 20:40:51 -0400 Eric H. Christensen wrote:
I've been talking with Garrett (gholms) about the important vulnerability affecting eucalyptus. Turns out eucalyptus is crazy complex to package and the purpose for packaging euca has passed. He's going to orphan the packages and we'll likely be able to discontinue it in Fedora. This will affect three vulnerabilites (1 Important, 2 Mediums).
Out of curiosity, what exactly do "discontinue" mean here? Retire it from released and still supported Fedora versions, or only from future (21+)? I know packages get removed from EPEL, I'm not sure if / how often that happens in Fedora
that's a critical question
* you can't remove them from released ISO's * normally there is a policy they can't be dropped
the real critical question in case of abandoned packages which stay unmaintained is does it a user typing "yum install" and get the impression it's maintained a favor or better not offer it in the repos so new users not start build infrastructure around it with no future and realize that later