From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 478D51382F6 for ; Thu, 7 Jul 2016 06:50:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B253C14179; Thu, 7 Jul 2016 06:50:36 +0000 (UTC) Received: from gw2.antarean.org (gw2.antarean.org [141.105.125.208]) by pigeon.gentoo.org (Postfix) with ESMTP id 80A1DE0A69 for ; Thu, 7 Jul 2016 06:50:35 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by gw2.antarean.org (Postfix) with ESMTP id 37004122561 for ; Thu, 7 Jul 2016 06:48:53 +0000 () X-Virus-Scanned: amavisd-new at antarean.org Received: from gw2.antarean.org ([127.0.0.1]) by localhost (gw2.antarean.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NKUlYbsLDs_t for ; Thu, 7 Jul 2016 06:48:51 +0000 (%Z) Received: from data.antarean.org (localhost [127.0.0.1]) by gw2.antarean.org (Postfix) with ESMTP id 68FAD122153 for ; Thu, 7 Jul 2016 06:48:51 +0000 () Received: from andromeda.localnet (lan100.nl.antarean.org [10.20.13.200]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by data.antarean.org (Postfix) with ESMTPSA id 1C5494C for ; Thu, 7 Jul 2016 08:49:11 +0200 (CEST) From: "J. Roeleveld" To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Re: Last rites: www-apps/egroupware Date: Thu, 07 Jul 2016 08:50:31 +0200 Message-ID: <15957889.RibemJvEc0@andromeda> User-Agent: KMail/4.14.10 (Linux/4.1.15-gentoo-r1; KDE/4.14.20; x86_64; ; ) In-Reply-To: References: <62caf651-7b5f-4579-9252-c410b9f2192d@gentoo.org> <3423754.vmCRSEyfN3@andromeda> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-Archives-Salt: 78401be0-fc19-4ec9-bddb-632d466b71dd X-Archives-Hash: fa636d04099eb830961eb60cc90fe652 On Thursday, July 07, 2016 06:37:09 AM Duncan wrote: > J. Roeleveld posted on Wed, 06 Jul 2016 20:22:57 +0200 as excerpted: > > On Thursday, June 30, 2016 10:30:07 PM Aaron Bauman wrote: > >> # Aaron Bauman (30 Jun 2016) > >> # Unpatched security vulnerability per bug #509920. > >> # Removal in 30 days www-apps/egroupware > > > > Why is this bug being used to treeclean egroupware? > > > > Why is bug 461212 not being used to actually resolve the issue? > > If I would actually be confident that it would actually be used, I would > > have no issue on trying to get my latest ebuild ( version 14.3.20160525 > > ) converted to the latest standards. > > According to equery meta, egroupware has no individual developer > maintainer and no proxied maintainer, only the webapps project as > maintainer. And apparently there, nobody has been specifically > interested in egroupware, so it has fallen thru the cracks to some > degree, tho newer versions /may/ be in the webapps-experimental overlay. I tried contacting the web-apps project directly, but never received a reply. > Here's the webapps project wiki page: > > https://wiki.gentoo.org/wiki/Project:Webapps > > That has this to say when discussing the overlay, quote: > .... > > The overlay can be found here: > https://cgit.gentoo.org/proj/webapps-experimental.git/ Last commit in 2011. > Warning > Please remember that the applications available through the overlay might > compromise the security of your server! > > The overlay is an ideal playground for new developers wishing to join our > team. Once we see that you are capable of writing ebuilds of reasonable > quality, we can provide you with commit rights to the overlay. > > End quote. > > > So it's possible newer versions are in the overlay, and they simply > decided it was too much of a load to keep a version in the tree as well. > > If there /aren't/ newer versions in the overlay, presumably it's because > nobody that has access has been interested in maintaining it in the > overlay either. > > Either way, given your obvious interest, I'd suggest contacting them > about overlay commit rights, and/or volunteering to be the proxied > maintainer for this particular package. Is there a way of finding out who are actually in the web-app project and which of them would be able and willing to work with me on this and other web applications that I actively use? >From the lack of response to the email and lack of updates on the overlay, the project seems dead to me. -- Joost