public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-dev] app-text/htmltidy: Maintainer Request
@ 2016-06-05 23:39 Yury German
  2016-06-06  0:02 ` Patrice Clement
  0 siblings, 1 reply; 7+ messages in thread
From: Yury German @ 2016-06-05 23:39 UTC (permalink / raw
  To: gentoo development


[-- Attachment #1.1: Type: text/plain, Size: 644 bytes --]

app-text/htmltidy currently has no maintainers. It has a vulnerability
[Security Bug] filed against it. And a number of other [package depend
on it]. Is nyone willing to pick it up?

[Secuity Bug]
https://bugs.gentoo.org/show_bug.cgi?id=561452

[package depend on it]
https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy

______________________________
Yury German
GLSA Coordinator | Gentoo Security Team
Administrator    | Planet Gentoo
Email: blueknight@gentoo.org

GPG Fingerprint: 8858 89D6 C0C4 75C4 D0DD  FA00 EEAF ED89 024C 043


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 455 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-05 23:39 [gentoo-dev] app-text/htmltidy: Maintainer Request Yury German
@ 2016-06-06  0:02 ` Patrice Clement
  2016-06-06 14:15   ` Yury German
  0 siblings, 1 reply; 7+ messages in thread
From: Patrice Clement @ 2016-06-06  0:02 UTC (permalink / raw
  To: gentoo-dev

[-- Attachment #1: Type: text/plain, Size: 1463 bytes --]

Sunday 05 Jun 2016 19:39:26, Yury German wrote :
> app-text/htmltidy currently has no maintainers. It has a vulnerability
> [Security Bug] filed against it. And a number of other [package depend
> on it]. Is nyone willing to pick it up?
> 
> [Secuity Bug]
> https://bugs.gentoo.org/show_bug.cgi?id=561452
> 
> [package depend on it]
> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy
> 
> ______________________________
> Yury German
> GLSA Coordinator | Gentoo Security Team
> Administrator    | Planet Gentoo
> Email: blueknight@gentoo.org
> 
> GPG Fingerprint: 8858 89D6 C0C4 75C4 D0DD  FA00 EEAF ED89 024C 043
>

Don't bother. Have a look at [1], [2] & [3] to find out why.

tl;dr

htmltidy has got to be culled at some point since it's now considered obsolete
after tidy-html5 entered the tree a little while ago. It's roughly the same
codebase yet it's HTML 5 compliant. Yay!

I've been maintaining the latter since its inclusion in the Portage tree but
would definitely need help to remove the former. I didn't swap htmltidy for
tidy-html5 cause they're two different projects. As you can see from the links
above, htmltidy has a gazillion deps.

[1]: http://tidy.sourceforge.net/
[2]: http://www.html-tidy.org/
[3]: https://github.com/htacg/tidy-html5

-- 
Patrice Clement
Gentoo Linux developer
http://www.gentoo.org

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-06  0:02 ` Patrice Clement
@ 2016-06-06 14:15   ` Yury German
  2016-06-06 14:41     ` Raymond Jennings
  0 siblings, 1 reply; 7+ messages in thread
From: Yury German @ 2016-06-06 14:15 UTC (permalink / raw
  To: gentoo-dev


[-- Attachment #1.1: Type: text/plain, Size: 1558 bytes --]



On 6/5/16 8:02 PM, Patrice Clement wrote:
> Sunday 05 Jun 2016 19:39:26, Yury German wrote :
>> app-text/htmltidy currently has no maintainers. It has a vulnerability
>> [Security Bug] filed against it. And a number of other [package depend
>> on it]. Is nyone willing to pick it up?
>>
>> [Secuity Bug]
>> https://bugs.gentoo.org/show_bug.cgi?id=561452
>>
>> [package depend on it]
>> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
>> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy

> Don't bother. Have a look at [1], [2] & [3] to find out why.
> 
> tl;dr
> 
> htmltidy has got to be culled at some point since it's now considered obsolete
> after tidy-html5 entered the tree a little while ago. It's roughly the same
> codebase yet it's HTML 5 compliant. Yay!
> 
> I've been maintaining the latter since its inclusion in the Portage tree but
> would definitely need help to remove the former. I didn't swap htmltidy for
> tidy-html5 cause they're two different projects. As you can see from the links
> above, htmltidy has a gazillion deps.
> 
> [1]: http://tidy.sourceforge.net/
> [2]: http://www.html-tidy.org/
> [3]: https://github.com/htacg/tidy-html5
> 

This is all agreed, but unless someone is driving this it will never get
removed from tree. The security patch is one thing, but cleaning it up
and switching to tidy-html5 is why we need a maintainer so that we can
get rid of the dependencies otherwise it will sit there unsecured for
the next 5 years.



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 455 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-06 14:15   ` Yury German
@ 2016-06-06 14:41     ` Raymond Jennings
  2016-06-06 14:55       ` Yury German
  0 siblings, 1 reply; 7+ messages in thread
From: Raymond Jennings @ 2016-06-06 14:41 UTC (permalink / raw
  To: gentoo-dev

[-- Attachment #1: Type: text/plain, Size: 1873 bytes --]

If tidy-html5 can take care of anything htmltidy can, then we can boot the
latter as obsolete anyhow.  Are there any backwards compatibility issues if
we just punt it and let tidy-html5 take over?

On Mon, Jun 6, 2016 at 7:15 AM, Yury German <blueknight@gentoo.org> wrote:

>
>
> On 6/5/16 8:02 PM, Patrice Clement wrote:
> > Sunday 05 Jun 2016 19:39:26, Yury German wrote :
> >> app-text/htmltidy currently has no maintainers. It has a vulnerability
> >> [Security Bug] filed against it. And a number of other [package depend
> >> on it]. Is nyone willing to pick it up?
> >>
> >> [Secuity Bug]
> >> https://bugs.gentoo.org/show_bug.cgi?id=561452
> >>
> >> [package depend on it]
> >> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
> >> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy
>
> > Don't bother. Have a look at [1], [2] & [3] to find out why.
> >
> > tl;dr
> >
> > htmltidy has got to be culled at some point since it's now considered
> obsolete
> > after tidy-html5 entered the tree a little while ago. It's roughly the
> same
> > codebase yet it's HTML 5 compliant. Yay!
> >
> > I've been maintaining the latter since its inclusion in the Portage tree
> but
> > would definitely need help to remove the former. I didn't swap htmltidy
> for
> > tidy-html5 cause they're two different projects. As you can see from the
> links
> > above, htmltidy has a gazillion deps.
> >
> > [1]: http://tidy.sourceforge.net/
> > [2]: http://www.html-tidy.org/
> > [3]: https://github.com/htacg/tidy-html5
> >
>
> This is all agreed, but unless someone is driving this it will never get
> removed from tree. The security patch is one thing, but cleaning it up
> and switching to tidy-html5 is why we need a maintainer so that we can
> get rid of the dependencies otherwise it will sit there unsecured for
> the next 5 years.
>
>
>

[-- Attachment #2: Type: text/html, Size: 3051 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-06 14:41     ` Raymond Jennings
@ 2016-06-06 14:55       ` Yury German
  2016-06-06 15:07         ` Raymond Jennings
  2016-06-07 21:44         ` Michael Orlitzky
  0 siblings, 2 replies; 7+ messages in thread
From: Yury German @ 2016-06-06 14:55 UTC (permalink / raw
  To: gentoo-dev

Well a few things need to happen:

1. app-text/tidy-html5 - Need to go Stabl
2. dep and rdep need to be migrated to tidy-html5 and tested.

Since Patrice (monsieurp) is the maintainer of tidy-html5, do you want
to become maintainer of htmltidy temporarily to help kill it and move to
tidy-html5?


On 6/6/16 10:41 AM, Raymond Jennings wrote:
> If tidy-html5 can take care of anything htmltidy can, then we can boot
> the latter as obsolete anyhow.  Are there any backwards compatibility
> issues if we just punt it and let tidy-html5 take over?
> 
> On Mon, Jun 6, 2016 at 7:15 AM, Yury German <blueknight@gentoo.org
> <mailto:blueknight@gentoo.org>> wrote:
> 
> 
> 
>     On 6/5/16 8:02 PM, Patrice Clement wrote:
>     > Sunday 05 Jun 2016 19:39:26, Yury German wrote :
>     >> app-text/htmltidy currently has no maintainers. It has a vulnerability
>     >> [Security Bug] filed against it. And a number of other [package depend
>     >> on it]. Is nyone willing to pick it up?
>     >>
>     >> [Secuity Bug]
>     >> https://bugs.gentoo.org/show_bug.cgi?id=561452
>     >>
>     >> [package depend on it]
>     >> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
>     >> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy
> 
>     > Don't bother. Have a look at [1], [2] & [3] to find out why.
>     >
>     > tl;dr
>     >
>     > htmltidy has got to be culled at some point since it's now considered obsolete
>     > after tidy-html5 entered the tree a little while ago. It's roughly the same
>     > codebase yet it's HTML 5 compliant. Yay!
>     >
>     > I've been maintaining the latter since its inclusion in the Portage tree but
>     > would definitely need help to remove the former. I didn't swap htmltidy for
>     > tidy-html5 cause they're two different projects. As you can see from the links
>     > above, htmltidy has a gazillion deps.
>     >
>     > [1]: http://tidy.sourceforge.net/
>     > [2]: http://www.html-tidy.org/
>     > [3]: https://github.com/htacg/tidy-html5
>     >
> 
>     This is all agreed, but unless someone is driving this it will never get
>     removed from tree. The security patch is one thing, but cleaning it up
>     and switching to tidy-html5 is why we need a maintainer so that we can
>     get rid of the dependencies otherwise it will sit there unsecured for
>     the next 5 years.
> 
> 
> 


^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-06 14:55       ` Yury German
@ 2016-06-06 15:07         ` Raymond Jennings
  2016-06-07 21:44         ` Michael Orlitzky
  1 sibling, 0 replies; 7+ messages in thread
From: Raymond Jennings @ 2016-06-06 15:07 UTC (permalink / raw
  To: gentoo-dev

[-- Attachment #1: Type: text/plain, Size: 2746 bytes --]

I'm not a gentoo developer yet (rl drama has majorly lagged me on getting
my quizzes done) but if there's a way I can help it I wouldn't mind.

On Mon, Jun 6, 2016 at 7:55 AM, Yury German <blueknight@gentoo.org> wrote:

> Well a few things need to happen:
>
> 1. app-text/tidy-html5 - Need to go Stabl
> 2. dep and rdep need to be migrated to tidy-html5 and tested.
>
> Since Patrice (monsieurp) is the maintainer of tidy-html5, do you want
> to become maintainer of htmltidy temporarily to help kill it and move to
> tidy-html5?
>
>
> On 6/6/16 10:41 AM, Raymond Jennings wrote:
> > If tidy-html5 can take care of anything htmltidy can, then we can boot
> > the latter as obsolete anyhow.  Are there any backwards compatibility
> > issues if we just punt it and let tidy-html5 take over?
> >
> > On Mon, Jun 6, 2016 at 7:15 AM, Yury German <blueknight@gentoo.org
> > <mailto:blueknight@gentoo.org>> wrote:
> >
> >
> >
> >     On 6/5/16 8:02 PM, Patrice Clement wrote:
> >     > Sunday 05 Jun 2016 19:39:26, Yury German wrote :
> >     >> app-text/htmltidy currently has no maintainers. It has a
> vulnerability
> >     >> [Security Bug] filed against it. And a number of other [package
> depend
> >     >> on it]. Is nyone willing to pick it up?
> >     >>
> >     >> [Secuity Bug]
> >     >> https://bugs.gentoo.org/show_bug.cgi?id=561452
> >     >>
> >     >> [package depend on it]
> >     >>
> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy
> >     >>
> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy
> >
> >     > Don't bother. Have a look at [1], [2] & [3] to find out why.
> >     >
> >     > tl;dr
> >     >
> >     > htmltidy has got to be culled at some point since it's now
> considered obsolete
> >     > after tidy-html5 entered the tree a little while ago. It's roughly
> the same
> >     > codebase yet it's HTML 5 compliant. Yay!
> >     >
> >     > I've been maintaining the latter since its inclusion in the
> Portage tree but
> >     > would definitely need help to remove the former. I didn't swap
> htmltidy for
> >     > tidy-html5 cause they're two different projects. As you can see
> from the links
> >     > above, htmltidy has a gazillion deps.
> >     >
> >     > [1]: http://tidy.sourceforge.net/
> >     > [2]: http://www.html-tidy.org/
> >     > [3]: https://github.com/htacg/tidy-html5
> >     >
> >
> >     This is all agreed, but unless someone is driving this it will never
> get
> >     removed from tree. The security patch is one thing, but cleaning it
> up
> >     and switching to tidy-html5 is why we need a maintainer so that we
> can
> >     get rid of the dependencies otherwise it will sit there unsecured for
> >     the next 5 years.
> >
> >
> >
>
>

[-- Attachment #2: Type: text/html, Size: 4349 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: [gentoo-dev] app-text/htmltidy: Maintainer Request
  2016-06-06 14:55       ` Yury German
  2016-06-06 15:07         ` Raymond Jennings
@ 2016-06-07 21:44         ` Michael Orlitzky
  1 sibling, 0 replies; 7+ messages in thread
From: Michael Orlitzky @ 2016-06-07 21:44 UTC (permalink / raw
  To: gentoo-dev

On 06/06/2016 10:55 AM, Yury German wrote:
> Well a few things need to happen:
> 
> 1. app-text/tidy-html5 - Need to go Stabl
> 2. dep and rdep need to be migrated to tidy-html5 and tested.
> 

Please also make sure that tidy-html5 has the same KEYWORDS as htmltidy.
We support a lot of the weird ones in dev-lang/php.



^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2016-06-07 21:44 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-06-05 23:39 [gentoo-dev] app-text/htmltidy: Maintainer Request Yury German
2016-06-06  0:02 ` Patrice Clement
2016-06-06 14:15   ` Yury German
2016-06-06 14:41     ` Raymond Jennings
2016-06-06 14:55       ` Yury German
2016-06-06 15:07         ` Raymond Jennings
2016-06-07 21:44         ` Michael Orlitzky

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox