From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 40AFF1382F6 for ; Thu, 7 Jul 2016 12:55:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7C54514088; Thu, 7 Jul 2016 12:55:38 +0000 (UTC) Received: from mail-yw0-f182.google.com (mail-yw0-f182.google.com [209.85.161.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 6CFE7E0941 for ; Thu, 7 Jul 2016 12:55:37 +0000 (UTC) Received: by mail-yw0-f182.google.com with SMTP id j17so13230065ywg.0 for ; Thu, 07 Jul 2016 05:55:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=Tdt/BDRi+Hbs+kgtJ4eAW/hi8Ow8ng4FpRCC7HgIA74=; b=yph5kul1vAfXYeQl51Ve13jO089AHvQGsS7cjs+tS6s6PYA1bq/WEpVg1hbMWUbGjL KEw3ICc7eRuTq53tzqQuHAGKNFboRJN2+IxKGiOmSvZPULwGhnPby9iql59zVPlk8hQN 8mHhvdpYAUXUhMg6bMPtZbCJoBLVIxGIlZFwa+s1eT04rZ6Ui6kZ1xlvuvXwHLAI5qdO 2Nvohd8SvpPaKGoD/hpY8obYPFyeXP91fprR8V3P3P6vn58AZsUgSrVvXBSAuCgiEZDk i8Sk+qt2gJuu+0twyXMt8IgHWx5wNraOnxlRPSeQ1g6kOh/kvS2DUuNkrQPLb+pf2o1j KUZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=Tdt/BDRi+Hbs+kgtJ4eAW/hi8Ow8ng4FpRCC7HgIA74=; b=BfK+RLubQ4vG2Wsvk3qnbHlw7AalZN4FwwZueaeeXn5E58dkLgqe7tS6ygxEUxPw1l AzX6WA9JrQV0NeLTsQ/deaMQmEW00JIA7ta3qOqbQvaZi/pUTl8+2apHywbl3gHpiPuD FNsw7hdbSJ+jBOhxkU0NmUg2kb7ojibLpiqzXS0zSnRXVAhAHGGGztM8zPrG3jVnSmqy sE7jK2dJjQYotZMqaYt77B3YX18cuyF86A1yBi82b6PVV3iiPk49T3XM2KRilzDeyD+m ebwUIxsoKtJsADEn34MNyjvO42aT+C8fxqhFj3KyaUAEHc/by1WlAcAFvj0yUHAo7smO xDIg== X-Gm-Message-State: ALyK8tLw/FUeKZRc7t0ZrBXnSQnkHCAkcp3lETFZ4cGIIz4AWaptIVjyqIRug0X0V9oRrxJl8hYecMYOmhd3CQ== X-Received: by 10.37.88.139 with SMTP id m133mr11974ybb.59.1467896136373; Thu, 07 Jul 2016 05:55:36 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Received: by 10.37.25.9 with HTTP; Thu, 7 Jul 2016 05:55:35 -0700 (PDT) In-Reply-To: <15957889.RibemJvEc0@andromeda> References: <62caf651-7b5f-4579-9252-c410b9f2192d@gentoo.org> <3423754.vmCRSEyfN3@andromeda> <15957889.RibemJvEc0@andromeda> From: Tomas Mozes Date: Thu, 7 Jul 2016 14:55:35 +0200 Message-ID: Subject: Re: [gentoo-dev] Re: Last rites: www-apps/egroupware To: gentoo-dev@lists.gentoo.org Content-Type: multipart/alternative; boundary=001a113fc632c6991605370b33b0 X-Archives-Salt: e6152203-6234-4e9b-a007-331aa22f2199 X-Archives-Hash: ac3912cade6bbda21e7b37b7125ab7cc --001a113fc632c6991605370b33b0 Content-Type: text/plain; charset=UTF-8 On Thu, Jul 7, 2016 at 8:50 AM, J. Roeleveld wrote: > On Thursday, July 07, 2016 06:37:09 AM Duncan wrote: > > J. Roeleveld posted on Wed, 06 Jul 2016 20:22:57 +0200 as excerpted: > > > On Thursday, June 30, 2016 10:30:07 PM Aaron Bauman wrote: > > >> # Aaron Bauman (30 Jun 2016) > > >> # Unpatched security vulnerability per bug #509920. > > >> # Removal in 30 days www-apps/egroupware > > > > > > Why is this bug being used to treeclean egroupware? > > > > > > Why is bug 461212 not being used to actually resolve the issue? > > > If I would actually be confident that it would actually be used, I > would > > > have no issue on trying to get my latest ebuild ( version 14.3.20160525 > > > ) converted to the latest standards. > > > > According to equery meta, egroupware has no individual developer > > maintainer and no proxied maintainer, only the webapps project as > > maintainer. And apparently there, nobody has been specifically > > interested in egroupware, so it has fallen thru the cracks to some > > degree, tho newer versions /may/ be in the webapps-experimental overlay. > > I tried contacting the web-apps project directly, but never received a > reply. > > > Here's the webapps project wiki page: > > > > https://wiki.gentoo.org/wiki/Project:Webapps > > > > That has this to say when discussing the overlay, quote: > > > .... > > > > The overlay can be found here: > > https://cgit.gentoo.org/proj/webapps-experimental.git/ > > Last commit in 2011. > > > Warning > > Please remember that the applications available through the overlay might > > compromise the security of your server! > > > > The overlay is an ideal playground for new developers wishing to join our > > team. Once we see that you are capable of writing ebuilds of reasonable > > quality, we can provide you with commit rights to the overlay. > > > > End quote. > > > > > > So it's possible newer versions are in the overlay, and they simply > > decided it was too much of a load to keep a version in the tree as well. > > > > If there /aren't/ newer versions in the overlay, presumably it's because > > nobody that has access has been interested in maintaining it in the > > overlay either. > > > > Either way, given your obvious interest, I'd suggest contacting them > > about overlay commit rights, and/or volunteering to be the proxied > > maintainer for this particular package. > > Is there a way of finding out who are actually in the web-app project and > which > of them would be able and willing to work with me on this and other web > applications that I actively use? > > From the lack of response to the email and lack of updates on the overlay, > the > project seems dead to me. > > -- > Joost > > > It's really sad to see a user wanting to keep up the ebuild and with no response from the webapps team. I can understand being busy, but by checking https://bugs.gentoo.org/show_bug.cgi?id=461212 it seems it's a long-term issue. Joost, please try to contact the proxy maintainers team and open a pull-request on github for the bump, that may be a way. Good luck. --001a113fc632c6991605370b33b0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Thu, Jul 7, 2016 at 8:50 AM, J. Roeleveld <joost@antarean.org&= gt; wrote:
On Thursday, July 07, 2016 06:37:09 AM Duncan wrote:
> J. Roeleveld posted on Wed, 06 Jul 2016 20:22:57 +0200 as excerpted: > > On Thursday, June 30, 2016 10:30:07 PM Aaron Bauman wrote:
> >> # Aaron Bauman <bman@ge= ntoo.org> (30 Jun 2016)
> >> # Unpatched security vulnerability per bug #509920.
> >> # Removal in 30 days www-apps/egroupware
> >
> > Why is this bug being used to treeclean egroupware?
> >
> > Why is bug=C2=A0 461212 not being used to actually resolve the is= sue?
> > If I would actually be confident that it would actually be used, = I would
> > have no issue on trying to get my latest ebuild ( version 14.3.20= 160525
> > ) converted to the latest standards.
>
> According to equery meta, egroupware has no individual developer
> maintainer and no proxied maintainer, only the webapps project as
> maintainer.=C2=A0 And apparently there, nobody has been specifically > interested in egroupware, so it has fallen thru the cracks to some
> degree, tho newer versions /may/ be in the webapps-experimental overla= y.

I tried contacting the web-apps project directly, but never received= a reply.

> Here's the webapps project wiki page:
>
> https://wiki.gentoo.org/wiki/Project:Webapps >
> That has this to say when discussing the overlay, quote:
>
....
>
> The overlay can be found here:
> https://cgit.gentoo.org/proj/webapps-expe= rimental.git/

Last commit in 2011.

> Warning
> Please remember that the applications available through the overlay mi= ght
> compromise the security of your server!
>
> The overlay is an ideal playground for new developers wishing to join = our
> team. Once we see that you are capable of writing ebuilds of reasonabl= e
> quality, we can provide you with commit rights to the overlay.
>
> End quote.
>
>
> So it's possible newer versions are in the overlay, and they simpl= y
> decided it was too much of a load to keep a version in the tree as wel= l.
>
> If there /aren't/ newer versions in the overlay, presumably it'= ;s because
> nobody that has access has been interested in maintaining it in the > overlay either.
>
> Either way, given your obvious interest, I'd suggest contacting th= em
> about overlay commit rights, and/or volunteering to be the proxied
> maintainer for this particular package.

Is there a way of finding out who are actually in the web-app projec= t and which
of them would be able and willing to work with me on this and other web
applications that I actively use?

>From the lack of response to the email and lack of updates on the overlay, = the
project seems dead to me.

--
Joost




It's really= sad to see a user wanting to keep up the ebuild and with no response from = the webapps team. I can understand being busy, but by checking https://bugs.gentoo.org/sh= ow_bug.cgi?id=3D461212 it seems it's a long-term issue. Joost, plea= se try to contact the proxy maintainers team and open a pull-request on git= hub for the bump, that may be a way.

Good luck.
--001a113fc632c6991605370b33b0--