[gentoo-dev] net-proxy/squid should be demoted to ~mips

[gentoo-dev] net-proxy/squid should be demoted to ~mips

[Alin Nastac]

[-- Attachment #1: Type: text/plain, Size: 254 bytes --]

Given the lack of interest manifested by mips team regarding
net-proxy/squid and its security bumps, I propose to remove the last
mips-stable version of this package - 2.5.10-r2 - marked as such by
hardave on September the 4th 2005.

Objections anyone?


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] net-proxy/squid should be demoted to ~mips

[Mike Frysinger]

On Friday 06 January 2006 08:07, Alin Nastac wrote:
> Given the lack of interest manifested by mips team regarding
> net-proxy/squid and its security bumps, I propose to remove the last
> mips-stable version of this package - 2.5.10-r2 - marked as such by
> hardave on September the 4th 2005.
>
> Objections anyone?

any reason you felt the need to e-mail gentoo-dev ?  this is a pure 
security/mips issue, the rest of gentoo dev could care less
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-proxy/squid should be demoted to ~mips

[Alin Nastac]

[-- Attachment #1: Type: text/plain, Size: 656 bytes --]

Mike Frysinger wrote:

>On Friday 06 January 2006 08:07, Alin Nastac wrote:
>  
>
>>Given the lack of interest manifested by mips team regarding
>>net-proxy/squid and its security bumps, I propose to remove the last
>>mips-stable version of this package - 2.5.10-r2 - marked as such by
>>hardave on September the 4th 2005.
>>
>>Objections anyone?
>>    
>>
>
>any reason you felt the need to e-mail gentoo-dev ?  this is a pure 
>security/mips issue, the rest of gentoo dev could care less
>-mike
>  
>
I've already been informed about the procedure in this case.
Sorry for the hassle, I thought I should inform gentoo-dev before
breaking keywords policy.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] net-proxy/squid should be demoted to ~mips

[Stuart Longland]

[-- Attachment #1: Type: text/plain, Size: 1364 bytes --]

Alin Nastac wrote:
> Given the lack of interest manifested by mips team regarding
> net-proxy/squid and its security bumps, I propose to remove the last
> mips-stable version of this package - 2.5.10-r2 - marked as such by
> hardave on September the 4th 2005.

As a member of the MIPS team, I take offence to that comment.

While yes, security is of high importance, we do not have the sufficient
numbers to make it priority 1.  It has to play second fiddle to other
issues such as kernel and toolchain-related issues.

Squid comes in significantly lower on the pecking order, due to
necessity, and so I don't watch it like a hawk to keyword each and every
version bump.

Also, it is worth noting that MIPS hardware is significantly much
slower, than x86 hardware... and so additional time must be allowed for.
 We are often testing quite a few packages, many of which take a long
time to compile.  (X for instance is an overnight job, minimum, on my
Indy).  Thus, we can't be expected to test things at the same rate as,
say, the x86 or AMD64 teams.

That said, now that I'm aware of the problem, I'll take a look and see
about bumping the latest version.
-- 
Stuart Longland (aka Redhatter)              .'''.
Gentoo Linux/MIPS Cobalt and Docs Developer  '.'` :
. . . . . . . . . . . . . . . . . . . . . .   .'.'
http://dev.gentoo.org/~redhatter             :.'

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] net-proxy/squid should be demoted to ~mips

[Carsten Lohrke]

[-- Attachment #1: Type: text/plain, Size: 523 bytes --]

You don't have to care, Alin. Mips is not among the security-wise supported¹ 
architectures.

Then only problem I see in general is, that every single subproject defines 
what is supported and the information is scattered on the different 
gentoo.org documentation pages (release, security, kernel,...). This is 
anything else but user friendly and can e.g. result in official releases for 
not security-wise supported architectures.


Carsten


[1] http://www.gentoo.org/security/en/vulnerability-policy.xml

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]