gallery2 outstanding security bugs -- Abondoned by Berninger?

Jon Ciesla limb at jcomserv.net
Wed Dec 10 20:25:57 UTC 2008


> On Fri, 5 Dec 2008 09:07:58 -0600 (CST)
> limb at jcomserv.net ("Jon Ciesla") wrote:
>
>>
>> >
>> >> On Wed, Dec 03, 2008 at 03:27:48PM -0600, Jon Ciesla wrote:
>> >>>
>> >>> >> I suggest starting the NRM process:
>> >>> >> https://fedoraproject.org/wiki/PackageMaintainers/Policy/NonResponsiveMaintainers
>> >>> >>
>> >>> >
>> >>> > It has already started. Bugs have been filed. Attempts to
>> >>> > contact
>> >>> have
>> >>> > been made. It's been months with zero contact.
>> >>> >
>> >>> > I guess the next step is to ask: who can take up these packages?
>> >>> >
>> >>> I could take a crack at gallery2.
>> >>
>> >> Are you able to maintain an EPEL version as well?  At least for
>> >> EL-5.
>> >
>> > Yes, I already do for Drupal and a few other PHP apps.
>>
>> I think I've got an updated version of gallery2 ready.  When will the
>> NRM process complete and the packages orphaned? It's somewhat
>> academic as I'm a provenpackager, I just don't want to step on any
>> toes.
>
> I would say go ahead and push the updates now...Can you please do so?
>
> We can sort out the primary maintainer later?

Absolutely.  I'll also dig further into the jpegtran issue and file a bug
if need be.

> kevin
> --
> fedora-devel-list mailing list
> fedora-devel-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-devel-list


-- 
in your fear, speak only peace
in your fear, seek only love

-d. bowie




More information about the fedora-devel-list mailing list