gallery2 outstanding security bugs -- Abondoned by Berninger?

Jon Ciesla limb at jcomserv.net
Wed Dec 10 20:59:42 UTC 2008


>
>> On Fri, 5 Dec 2008 09:07:58 -0600 (CST)
>> limb at jcomserv.net ("Jon Ciesla") wrote:
>>
>>>
>>> >
>>> >> On Wed, Dec 03, 2008 at 03:27:48PM -0600, Jon Ciesla wrote:
>>> >>>
>>> >>> >> I suggest starting the NRM process:
>>> >>> >> https://fedoraproject.org/wiki/PackageMaintainers/Policy/NonResponsiveMaintainers
>>> >>> >>
>>> >>> >
>>> >>> > It has already started. Bugs have been filed. Attempts to
>>> >>> > contact
>>> >>> have
>>> >>> > been made. It's been months with zero contact.
>>> >>> >
>>> >>> > I guess the next step is to ask: who can take up these packages?
>>> >>> >
>>> >>> I could take a crack at gallery2.
>>> >>
>>> >> Are you able to maintain an EPEL version as well?  At least for
>>> >> EL-5.
>>> >
>>> > Yes, I already do for Drupal and a few other PHP apps.
>>>
>>> I think I've got an updated version of gallery2 ready.  When will the
>>> NRM process complete and the packages orphaned? It's somewhat
>>> academic as I'm a provenpackager, I just don't want to step on any
>>> toes.
>>
>> I would say go ahead and push the updates now...Can you please do so?
>>
>> We can sort out the primary maintainer later?
>
> Absolutely.  I'll also dig further into the jpegtran issue and file a bug
> if need be.

Builds ongoing.

Re jpegtran, there is a bug, against RHEL5:
https://bugzilla.redhat.com/show_bug.cgi?id=475679

CCing Tom.  Tom, would you like me to work on adding this patch into
Fedora's libjpeg?

>> kevin
>> --
>> fedora-devel-list mailing list
>> fedora-devel-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-devel-list
>
>
> --
> in your fear, speak only peace
> in your fear, seek only love
>
> -d. bowie
>
> --
> fedora-devel-list mailing list
> fedora-devel-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-devel-list
>


-- 
in your fear, speak only peace
in your fear, seek only love

-d. bowie




More information about the fedora-devel-list mailing list