[gentoo-dev] Dropping phpgroupware from the Portage tree

[gentoo-dev] Dropping phpgroupware from the Portage tree

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 799 bytes --]

Hi,

I've just masked the package 'www-apps/phpgroupware', and will be
dropping it from the tree soon.  There are a number of issues with the
project, including:

* Outstanding security bugs
* Upstream homepage no longer available
* No real releases in over a year

'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
and is available via Portage for anyone looking for an alternative.

Best regards,
Stu
-- 
Stuart Herbert                                         stuart@gentoo.org
Gentoo Developer                                  http://www.gentoo.org/
                                              http://stu.gnqs.org/diary/

GnuGP key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

[Jason Huebel]

[-- Attachment #1: Type: text/plain, Size: 983 bytes --]

On Sunday 20 November 2005 5:38 am, Stuart Herbert wrote:
> Hi,
>
> I've just masked the package 'www-apps/phpgroupware', and will be
> dropping it from the tree soon.  There are a number of issues with the
> project, including:
>
> * Outstanding security bugs
> * Upstream homepage no longer available
> * No real releases in over a year
>
> 'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
> and is available via Portage for anyone looking for an alternative.
>
> Best regards,
> Stu

This looks like one of those things that should be announced in GWN or 
something.  phpgroupware is still widely used and users need to know Gentoo 
is dropping support for it in favor of egroupware.

-- 
Jason Huebel
Gentoo Board Of Trustees Member
Gentoo Developer Relations/Recruiter

GPG Public Key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9BA9E230

"Do not weep; do not wax indignant. Understand."
Baruch Spinoza (1632 - 1677)

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

[Petteri Räty]

[-- Attachment #1: Type: text/plain, Size: 867 bytes --]

Jason Huebel wrote:
> On Sunday 20 November 2005 5:38 am, Stuart Herbert wrote:
> 
>>Hi,
>>
>>I've just masked the package 'www-apps/phpgroupware', and will be
>>dropping it from the tree soon.  There are a number of issues with the
>>project, including:
>>
>>* Outstanding security bugs
>>* Upstream homepage no longer available
>>* No real releases in over a year
>>
>>'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
>>and is available via Portage for anyone looking for an alternative.
>>
>>Best regards,
>>Stu
> 
> 
> This looks like one of those things that should be announced in GWN or 
> something.  phpgroupware is still widely used and users need to know Gentoo 
> is dropping support for it in favor of egroupware.
> 

gentoo-announce mailing list too if it is still widely used

Regards,
Petteri Räty


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

[Thierry Carrez]

Stuart Herbert wrote:

> I've just masked the package 'www-apps/phpgroupware', and will be
> dropping it from the tree soon.  There are a number of issues with the
> project, including:
> 
> * Outstanding security bugs
> * Upstream homepage no longer available
> * No real releases in over a year

FYI, I just received the following from Dave Hall
<phpgw@skwashd.homelinux.org> :

> Hi all,
> 
> You are encouraged to update to the latest version of phpGroupWare -
> 0.9.16.009.  The release contains several major bug fixes as well as
> some important security fixes.
> 
> You can grab the new version from -
> http://sourceforge.net/project/showfiles.php?group_id=7305
> 
> Or update from cvs
> $ cd /path/to/phpgroupware
> $ export CVS_RSH=ssh
> $ cvs update -dP
> 
> Changelog is as follows:
> 
> Fixes for the following security issues:
> * phpSysInfo 
>   - XSS CVE-2005-0870
>   - arbitrary file inclusion CVE-2005-3347
>   - anti XSS measure CVE-2005-3348
> * FUDForum
>   - arbitary code execution SA16627
> 
> Major bug fixes:
>   - LDAP account returns only phpGroupWare accounts
>   - accounts list pages and sorts properly
>   - Next account id is properly generated
>   - First group shows properly in ACL manager
>   - Calendar footer now shows again
>   - Calendar alarms can be set, editted and viewed
>   - Fix apps to work with anti XSS code from 007/8
>     - News Admin 
>     - Sitemgr
> 
> Additional languages and translated phrases
> 
> We hope to have our website back up and running in the 24hours, so for
> the inconvenience this may be causing people.
> 
> Cheers
> Dave

So it looks like it's still maintained and the homepage problem is
temporary...

-- 
Koon
-- 
gentoo-dev@gentoo.org mailing list