[TYPO3-project-4-3] TYPO3 Distribution Concept for 4.3

Franz Koch typo.removeformessage at fx-graefix.de
Fri May 15 14:58:17 CEST 2009


Hi Marcus,
>> [...]
>> This concept would also be much wiser if you think about security issues
>> etc. If a security leak is found in a bundled extension, simply update
>> the required version of the extension to the one of the security-fix and
>> you're done - no repacking etc.
>> [...]
> 
> Good point - security. As you know, we regularly find security issues in
> widely spread extensions. If you feel you could manage re-bundling them
> in such cases, then I'm fine with it. Otherwise think about a better
> approach.

sorry - don't get your point here. Are you saying bundled extensions 
(that might be bundled by specific version to ensure compatibility with 
the distribution) should not get "updated" if a security leak was found 
and fixed? In the concept I described, you would only have to edit a 
configuration file/form and raise the minimum version number for the 
bundled extension (like in ext_emconf.php) - no need for repacking etc.

Providing up2date and secure distributions is for me a must have - 
otherwise drop this 'official' distribution idea completely.
-- 
kind regards,
Franz Koch

---------------------------------------------------
PayPal-Account: 'paypal _at_ elements-net _dot_ de'
---------------------------------------------------


More information about the TYPO3-project-4-3 mailing list