public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-dev] Removal of rxvt
@ 2017-05-11 15:57 Jason A. Donenfeld
  2017-05-11 22:23 ` Daniel Campbell
  2017-05-11 22:46 ` Matthias Maier
  0 siblings, 2 replies; 3+ messages in thread
From: Jason A. Donenfeld @ 2017-05-11 15:57 UTC (permalink / raw
  To: gentoo-dev

Hi folks,

Rxvt is ancient. It's been replace by rxvt-unicode. Rxvt hasn't seen
updates in years. Recently it's been the subject of a security
vulnerability, and I suspect it's filled with other potential
vulnerabilities. Rxvt has no upstream. I tried reaching out to the
former upstream, and it's evident everybody has moved on and has no
interest in further maintenance. It doesn't even have a Gentoo
maintainer!

Given this, I'd like to remove rxvt from Gentoo, with the usual
mask-for-30-days process.

Does anybody have any objections to me doing this? (I'll wait a week
from now before taking any actions.)

Regards,
Jason

-- 
Jason A. Donenfeld
Gentoo Linux Security
zx2c4@gentoo.org
www.zx2c4.com
zx2c4.com/keys/A28BEDE08F1744E16037514806C4536755758000.asc


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [gentoo-dev] Removal of rxvt
  2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
@ 2017-05-11 22:23 ` Daniel Campbell
  2017-05-11 22:46 ` Matthias Maier
  1 sibling, 0 replies; 3+ messages in thread
From: Daniel Campbell @ 2017-05-11 22:23 UTC (permalink / raw
  To: gentoo-dev


[-- Attachment #1.1: Type: text/plain, Size: 1078 bytes --]

On 05/11/2017 08:57 AM, Jason A. Donenfeld wrote:
> Hi folks,
> 
> Rxvt is ancient. It's been replace by rxvt-unicode. Rxvt hasn't seen
> updates in years. Recently it's been the subject of a security
> vulnerability, and I suspect it's filled with other potential
> vulnerabilities. Rxvt has no upstream. I tried reaching out to the
> former upstream, and it's evident everybody has moved on and has no
> interest in further maintenance. It doesn't even have a Gentoo
> maintainer!
> 
> Given this, I'd like to remove rxvt from Gentoo, with the usual
> mask-for-30-days process.
> 
> Does anybody have any objections to me doing this? (I'll wait a week
> from now before taking any actions.)
> 
> Regards,
> Jason
> 

Sounds sane to me. It might be helpful to ask if anyone in gentoo-user
is interested in proxying, but as far as I know anyone who used rxvt
migrated to rxvt-unicode once it was stable.

-- 
Daniel Campbell - Gentoo Developer
OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net
fpr: AE03 9064 AE00 053C 270C  1DE4 6F7A 9091 1EA0 55D6


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [gentoo-dev] Removal of rxvt
  2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
  2017-05-11 22:23 ` Daniel Campbell
@ 2017-05-11 22:46 ` Matthias Maier
  1 sibling, 0 replies; 3+ messages in thread
From: Matthias Maier @ 2017-05-11 22:46 UTC (permalink / raw
  To: gentoo-dev


On Thu, May 11, 2017, at 10:57 CDT, "Jason A. Donenfeld" <zx2c4@gentoo.org> wrote:

> Does anybody have any objections to me doing this? (I'll wait a week
> from now before taking any actions.)

There is a clear and easy upgrade path to rxvt-unicode, so please mask
right away.

Best,
Matthias


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2017-05-11 22:46 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
2017-05-11 22:23 ` Daniel Campbell
2017-05-11 22:46 ` Matthias Maier

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox