* [gentoo-dev] Removal of rxvt
@ 2017-05-11 15:57 Jason A. Donenfeld
2017-05-11 22:23 ` Daniel Campbell
2017-05-11 22:46 ` Matthias Maier
0 siblings, 2 replies; 3+ messages in thread
From: Jason A. Donenfeld @ 2017-05-11 15:57 UTC (permalink / raw
To: gentoo-dev
Hi folks,
Rxvt is ancient. It's been replace by rxvt-unicode. Rxvt hasn't seen
updates in years. Recently it's been the subject of a security
vulnerability, and I suspect it's filled with other potential
vulnerabilities. Rxvt has no upstream. I tried reaching out to the
former upstream, and it's evident everybody has moved on and has no
interest in further maintenance. It doesn't even have a Gentoo
maintainer!
Given this, I'd like to remove rxvt from Gentoo, with the usual
mask-for-30-days process.
Does anybody have any objections to me doing this? (I'll wait a week
from now before taking any actions.)
Regards,
Jason
--
Jason A. Donenfeld
Gentoo Linux Security
zx2c4@gentoo.org
www.zx2c4.com
zx2c4.com/keys/A28BEDE08F1744E16037514806C4536755758000.asc
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [gentoo-dev] Removal of rxvt
2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
@ 2017-05-11 22:23 ` Daniel Campbell
2017-05-11 22:46 ` Matthias Maier
1 sibling, 0 replies; 3+ messages in thread
From: Daniel Campbell @ 2017-05-11 22:23 UTC (permalink / raw
To: gentoo-dev
[-- Attachment #1.1: Type: text/plain, Size: 1078 bytes --]
On 05/11/2017 08:57 AM, Jason A. Donenfeld wrote:
> Hi folks,
>
> Rxvt is ancient. It's been replace by rxvt-unicode. Rxvt hasn't seen
> updates in years. Recently it's been the subject of a security
> vulnerability, and I suspect it's filled with other potential
> vulnerabilities. Rxvt has no upstream. I tried reaching out to the
> former upstream, and it's evident everybody has moved on and has no
> interest in further maintenance. It doesn't even have a Gentoo
> maintainer!
>
> Given this, I'd like to remove rxvt from Gentoo, with the usual
> mask-for-30-days process.
>
> Does anybody have any objections to me doing this? (I'll wait a week
> from now before taking any actions.)
>
> Regards,
> Jason
>
Sounds sane to me. It might be helpful to ask if anyone in gentoo-user
is interested in proxying, but as far as I know anyone who used rxvt
migrated to rxvt-unicode once it was stable.
--
Daniel Campbell - Gentoo Developer
OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net
fpr: AE03 9064 AE00 053C 270C 1DE4 6F7A 9091 1EA0 55D6
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [gentoo-dev] Removal of rxvt
2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
2017-05-11 22:23 ` Daniel Campbell
@ 2017-05-11 22:46 ` Matthias Maier
1 sibling, 0 replies; 3+ messages in thread
From: Matthias Maier @ 2017-05-11 22:46 UTC (permalink / raw
To: gentoo-dev
On Thu, May 11, 2017, at 10:57 CDT, "Jason A. Donenfeld" <zx2c4@gentoo.org> wrote:
> Does anybody have any objections to me doing this? (I'll wait a week
> from now before taking any actions.)
There is a clear and easy upgrade path to rxvt-unicode, so please mask
right away.
Best,
Matthias
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2017-05-11 22:46 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-05-11 15:57 [gentoo-dev] Removal of rxvt Jason A. Donenfeld
2017-05-11 22:23 ` Daniel Campbell
2017-05-11 22:46 ` Matthias Maier
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox