From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JBf1z-0002PL-11 for garchives@archives.gentoo.org; Sun, 06 Jan 2008 23:35:51 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6459AE0454; Sun, 6 Jan 2008 23:35:49 +0000 (UTC) Received: from mo-p07-ob.rzone.de (mo-p07-ob.rzone.de [81.169.146.188]) by pigeon.gentoo.org (Postfix) with ESMTP id 253EBE0454 for ; Sun, 6 Jan 2008 23:35:49 +0000 (UTC) X-RZG-CLASS-ID: mo07 X-RZG-AUTH: hXn+rC1arvT7Lf9I/zKDqjrgIkrokD1Qxy5bIqfbp9I10BMNL35Kumb7+O8gwT7nDccLe+SW Received: from localhost (dynamic-unidsl-85-197-17-168.westend.de [85.197.17.168]) by post.webmailer.de (mrclete mo60) (RZmta 15.1) with ESMTP id x0715ak06Jq8Fz for ; Mon, 7 Jan 2008 00:35:48 +0100 (MET) (envelope-from: ) Date: Mon, 7 Jan 2008 00:35:41 +0100 From: Christian Faulhammer To: gentoo-dev@lists.gentoo.org Subject: [gentoo-dev] Re: Monthly Gentoo Council Reminder for January Message-ID: <20080107003541.43e12329@gentoo.org> In-Reply-To: <20080106073920.1008f064@snowcone> References: <20080101103002.083C4652C4@smtp.gentoo.org> <477D75CA.1030003@gentoo.org> <20080104000155.23e056b4@snowcone> <20080104004653.039f488e@snowcone> <20080104012750.63f4f23a@snowcone> <63044.68.54.223.178.1199445791.squirrel@www.aei-tech.com> <20080104210213.50a99e6b@snowcone> <61164.68.54.223.178.1199485599.squirrel@www.aei-tech.com> <20080104223754.3fb48b85@snowcone> <1199506818.7609.30.camel@inertia.twi-31o2.org> <20080105043233.0935d2f8@snowcone> <20080105124751.0bef4908@gentoo.org> <20080106003246.6e4b6425@snowcone> <20080106013630.7e0a504b@snowcone> <47803A61.7000600@gentoo.org> <20080106022402.01174707@snowcone> <47803DA9.10000@gentoo.org> <20080106023852.25b42e4b@snowcone> <47804281.3010000@gentoo.org> <20080106025825.2bedc1f1@snowcone> <47804C98.5050008@gentoo.org> <20080106073920.1008f064@snowcone> X-Mailer: Claws Mail 3.2.0 (GTK+ 2.12.1; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/YVZ_2od5R6/NhTA_jFWKGh1"; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Archives-Salt: 0e860756-2e9b-4b57-a325-f682b2c2ccd1 X-Archives-Hash: 8b9b1baa1d0066d93779fd5ff377bcda --Sig_/YVZ_2od5R6/NhTA_jFWKGh1 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, Ciaran McCreesh : > > Who knows how long that request would have languished if not for > > the security bug? > Who knows indeed... Wouldn't the Council be better served with > examples where we do know?=20 is a list of closed security bugs where mips is still cced. 163 is the total number, where surely some duplicates can be found (PHP, Mozilla products), but we can assume that quite an extensive number of packages which are vulnerable stay still in the tree. Normal policy is to remove all vulnerable ebuilds which is not possible if a vulnerable version is the only one keyworded mips. This would break an even bigger rule. We are not here to accuse anyone but to find a solution to this problem...and no, I am not in the (financial) position to buy MIPS hardware nor am I really interested in having it. V-Li --=20 Christian Faulhammer, Gentoo Lisp project , #gentoo-lisp on FreeNode --Sig_/YVZ_2od5R6/NhTA_jFWKGh1 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQFHgWXRNQqtfCuFneMRApOLAJ9M9BUKpaoapH7VrqI7r6qEtEvIUQCeJLBe td9Hrg6rGDikK6CsVwCDjNs= =iTDu -----END PGP SIGNATURE----- --Sig_/YVZ_2od5R6/NhTA_jFWKGh1-- -- gentoo-dev@lists.gentoo.org mailing list