[OpenAFS] When to publish security advisories?

[Russ Allbery]

Simon Wilkinson <sxw@inf.ed.ac.uk> writes:

> We need to be careful that we don't burn out the volunteers who provide
> this service by creating releases too frequently. This is going to be
> especially important in the next few months when we'll be maintaining
> both a new stable series (1.6.x) and a legacy one (1.4.x)

I should probably note here that I've already stopped maintaining Debian
packages for 1.4.x except for security fixes.  What released with squeeze
is it for 1.4 except for security problems, now that Debian unstable has
1.6.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>