On 9/12/19 1:22 PM, Matthew R. Trower wrote: > I would say, since the code isn't a current threat, let's take a moment to > wrap up a few of those items. > > 3) It's been a while since I've looked at the codebase. I'll take some time > over the next couple of days to make sure things are building and running > right on my Solaris-descended systems, and (hopefully) patch anything that's > rotted. >
Thanks! > 4) I remember there being some useful stuff in here - scrolling, I think > numeric keypad? I'll try to have a look at the diffs and see what we're > dealing with - whether it will work cross-platform, etc.. > > Yeah - all except the utmpx stuff looked ok to me. -jon > -mrt > > > > Original Message > > > > From: j...@radscan.com > Sent: September 11, 2019 6:10 PM > To: cdesktopenv-devel@lists.sourceforge.net > Subject: [cdesktopenv-devel] Time for a new release? > > > > As has been pointed out in IRC, there are some security fixes in current > master. There are a variety of other fixes that have gone into master > as well since the last release. We are overdue, as usual, for a new > release. > > We could just do a version now based on current master, or we can wait a > bit to decide some of the issues described below first: > > > 1. Has any one tested the utf8-conversion branch yet? Should it be > merged into master yet? If not, then I will merge it to master after > release and let the bugs flow forth. > > 2. cde-next branch - should that be merged into master first? Peter? > I'm not sure what's current there ATM. > > 3. Are there any other patches that need to be sent in by the various > maintainers for the BSD's, Solarii, etc? > > 4. There were some patches (diffs actually) recently posted to the list > (Subject: "Some untested patches") - scroll support in dtterm etc. What > shall we do with those? I didn't have the time to break these up into > proper patches for review and test. > > Anyone want to turn them into a proper patch submission? > > > 5. There's also a fix for a fedora and opensuse bug in building ksh in > CDE: > https://sourceforge.net/p/cdesktopenv/discussion/general/thread/24d7511a39/ > > Someone want to test and make a patch? I'm sorry, I just don't have > time to go trawling through forum posts to assemble proper patches. > > Since the exploit does not currently work with our CDE (though the code > *is* definitely broken), I am more inclined to take a few weeks and > incorporate some of the fixes above (though not utf8-conversion if no > one else has really tested it yet.). > > Otherwise we can just create a release based on current master and > integrate the above stuff "later". > > > -- > Jon Trulson > > "Nothing unreal exists." > -- Kiri-kin-tha > > > _______________________________________________ > cdesktopenv-devel mailing list > cdesktopenv-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel > > _______________________________________________ > cdesktopenv-devel mailing list > cdesktopenv-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel > -- Jon Trulson "Nothing unreal exists." -- Kiri-kin-tha _______________________________________________ cdesktopenv-devel mailing list cdesktopenv-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel
