From debbugs-submit-bounces@debbugs.gnu.org Fri Mar 19 20:44:14 2021 Received: (at 47257) by debbugs.gnu.org; 20 Mar 2021 00:44:14 +0000 Received: from localhost ([127.0.0.1]:51222 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNPiw-0006Qf-GO for submit@debbugs.gnu.org; Fri, 19 Mar 2021 20:44:14 -0400 Received: from world.peace.net ([64.112.178.59]:59422) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNPiu-0006QS-Vi for 47257@debbugs.gnu.org; Fri, 19 Mar 2021 20:44:13 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lNPip-0003hv-3D; Fri, 19 Mar 2021 20:44:07 -0400 From: Mark H Weaver To: =?utf-8?Q?L=C3=A9o?= Le Bouter Subject: Re: bug#47257: [PATCH 1/1] gnu: mariadb: Update to 10.5.9 [fixes CVE-2021-27928]. In-Reply-To: <87blbemzww.fsf@netris.org> References: <20210319113537.18290-1-lle-bout@zaclys.net> <20210319113537.18290-2-lle-bout@zaclys.net> <87blbemzww.fsf@netris.org> Date: Fri, 19 Mar 2021 20:42:33 -0400 Message-ID: <878s6imz8r.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 47257 Cc: 47257@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Mark H Weaver writes: > 'package/inherit' is usually the right thing when defining other kinds > of package variants, however. One addendum to this guideline: if the package variant you're defining overrides the 'source' field[*], it's probably pointless to use 'package/inherit', because the fixes embodied in the original package's replacement would most likely be lost anyway. [*] One exception is if the overridden 'source' field merely adds some additional patches to the original package, while taking care to preserve any existing patches -- that last part is important, even if the original package doesn't including any patches at the time you look. In that case, 'package/inherit' might well be helpful. More generally, when inheriting from another package, it's useful to ask yourself what should happen if the package you're inheriting from is later grafted, and to try to arrange for that to happen automatically. Thanks, Mark