Comment 11 for bug 1927755

Revision history for this message
Robie Basak (racb) wrote :

It is unfortunate that this bug was introduced in the security fix. But it is also understandable, since we can only realistically test the build configuration that we actually ship. So sorry, as unfortunate as this is I don't think this is suitable for SRU. We expect only to fix issues in our sources if they affect the binary builds that we ship.

Somebody said:

>
Custom builds are actually supposed to be supported by editing special files,
 README.Debian.html says:

"Additionally, the source package offers infrastructure to build your own custom-tailored exim4-daemon-custom which exactly fits your special local needs. The infrastructure to do so is already in place, see debian/rules for instructions. "

Unfortunately, anyone doing that to enable dmarc will have a failing build.
>

Unfortunately the word "support" has multiple meanings here. Ubuntu is Free Software and that means that we want users to be able to adjust the source to their needs. But just because the package maintainer has left a mechanism to make that easier, doesn't mean that we're going to patch our sources and rebuild our binaries for bugs not present in our builds.

Given that they're rebuilding from source, affected users should be able to patch it as needed themselves, and maintain that patch over security updates as needed.

All changes risk regressing existing unaffected users to some extent or other, and to mitigate that takes engineering review time. Given that this bug doesn't affect our build, I don't think it's worth spending the review time on this case.