| View previous topic :: View next topic |
| Author |
Message |
Ottre
Tux's lil' helper
Joined: 23 Dec 2012
Posts: 129
|
 Posted: Fri Jul 15, 2016 7:24 am Post subject: Please post this to the gentoo-dev mailing list |
 |
|
I emailed this to the gentoo-dev mailing list 4 days ago.
It seems it didn't go through.
Possibly because my sender name is "Ottre". I don't know how to change it to my real name in gmail.
Somebody who has access to gentoo-dev, please post it on my behalf.
| Quote: |
Subject: Please review the removal of sys-apps/9base
The sys-apps/9base package was removed on July 5 on the grounds "Dead upstream and unpatched security vulnerability". [1]
There was a commit to the 9base codebase on June 16. [2]
It may not be kicking very hard, but upstream is alive.
There may be a vulnerability in the rc component, but 9base has nearly 50 components!
Isn't the best course of action:
1. Ask upstream for a patch that can be applied at the distribution level. I suspect they have a patch, but don't want to apply it for philosophical reasons. [3]
2. Prevent the rc component from being built, and add a warning to the ebuild saying "use app-shells/rc instead".
Regards, Andrew
-------------
[1] https://bugs.gentoo.org/show_bug.cgi?id=500970
[2] http://git.suckless.org/9base/commit/?id=7a0d18922b67c0e21c415e0865a1cfdb0646f020
[3] "9base contains the following original (no source changes) shell commands from Plan 9", see http://tools.suckless.org/9base
|
|
|
| Back to top |
|
 |
xaviermiller
Bodhisattva
Joined: 23 Jul 2004
Posts: 8710
Location: ~Brussels - Belgique
|
| Posted: Fri Jul 15, 2016 7:29 am Post subject: |
|
|
Hi!,
Did you register to the mailing list? You need to do it in order to be able to send mails.
_________________
Kind regards,
Xavier Miller |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Other Things Gentoo
