gallery2 outstanding security bugs -- Abondoned by Berninger?

[Dan Nicholson]

On Thu, Dec 18, 2008 at 10:23 AM, Jon Ciesla <limb at jcomserv.net> wrote:
>
>> Jon Ciesla wrote:
>>>> "Jon Ciesla" <limb at jcomserv.net> writes:
>>>>>> (Yes, I know libjpeg upstream is kinda moribund, but if you want new
>>>>>> features in it you should be trying to revive upstream development,
>>>>>> not strongarm the Fedora package maintainer to take over
>>>>>> development.)
>>>>> I agree strongly with that principle.  Two questions:
>>>>> A. What has been done thusfar WTR reviving upstream development?
>>>> Well, at one point I had more or less formally blessed Guido Vollbeding
>>>> as the new lead maintainer, but if he's actually put out a release I
>>>> haven't heard about it :-(.  You could try bugging the people
>>>> associated
>>>> with the sourceforge libjpeg project.
>>>
>>> CCing them.  libjpeg SourceForge team, what is the current status of
>>> libjpeg development?
>>
>> Jon,
>>
>> I have heard nothing in some time from Guido, and I'm not aware of him
>> producing any sort of libjpeg release.
>>
>> I find the situation somewhat frustrating.
>
> Agreed.  So what's next?  Is there a plan for further action, a new
> primary maintainer, etc?

There was a fork on freedesktop.org for a while that was eventually
removed because the new maintainers were unresponsive.

http://www.clearchain.com/blog/posts/project-libjpeg-shutdown

If you could convince them that you would actually maintain it, they
might be receptive to reviving it.

--
Dan