Re: Remove groovy
On 2007-11-02, Moritz Muehlenhoff <[EMAIL PROTECTED]> wrote: > It was reported to the Security Team, that groovy embeds a lot of packages, > several of them security-sensitive: > > /usr/share/groovy/lib/axion-1.0-M3-dev.jar > /usr/share/groovy/lib/commons-collections-3.0-dev2.jar > /usr/share/groovy/lib/commons-httpclient-2.0.1.jar > /usr/share/groovy/lib/nekohtml-0.7.7.jar > /usr/share/groovy/lib/openejb-loader-0.9.2.jar > /usr/share/groovy/lib/qdox-1.3.jar > /usr/share/groovy/lib/radeox-0.9.jar > /usr/share/groovy/lib/radeox-oro-0.9.jar > /usr/share/groovy/lib/xerces-2.4.0.jar > /usr/share/groovy/lib/xml-apis-1.0.b2.jar > /usr/share/groovy/lib/servlet-2.3.jar > /usr/share/groovy/lib/regexp.jar > /usr/share/groovy/lib/mx4j.jar > /usr/share/groovy/lib/mockobjects-core.jar > /usr/share/groovy/lib/junit.jar > /usr/share/groovy/lib/commons-logging.jar > /usr/share/groovy/lib/commons-cli.jar > /usr/share/groovy/lib/classworlds-1.0.jar > /usr/share/groovy/lib/bsf.jar > /usr/share/groovy/lib/asm-util.jar > /usr/share/groovy/lib/asm.jar > /usr/share/groovy/lib/asm-attrs.jar > /usr/share/groovy/lib/asm-analysis.jar > > Since it's in contrib, it's not security-supported, but given the state of it > (outdated, > hardly any users) it should likely be just removed? Unless anyone objects within the next days, I'll file an RM bug. Cheers, Moritz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Package removal or adoption
Hi folks, I am copying the games teams since I am a "member" and am currently focusing on orphaned or unmaintained games. In case anyone there wants to weigh in as well. I am looking a several of the games type packages that are orphaned or unmaintained and I am trying to understand Debian's "policy" with regards to removal. Here are two examples: nettoe and xbattle. What is the criteria for keeping these packages? I guess that according to BTS they are "bug-free" but in the case of say xbattle, they are un-developed upstream, don't seem to have much of a following (according to popcon). Is it preferred that they stay in the archives? If so, should I pick them up for the games team or just leave them out there as orphaned? Any input would be greatly appreciated. Thanks, Barry deFreese -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Package removal or adoption
Barry deFreese wrote: > Hi folks, > > I am copying the games teams since I am a "member" and am currently > focusing on orphaned or unmaintained games. In case anyone there wants > to weigh in as well. > > I am looking a several of the games type packages that are orphaned or > unmaintained and I am trying to understand Debian's "policy" with > regards to removal. Here are two examples: nettoe and xbattle. > > What is the criteria for keeping these packages? I guess that according > to BTS they are "bug-free" but in the case of say xbattle, they are > un-developed upstream, don't seem to have much of a following (according > to popcon). Is it preferred that they stay in the archives? If so, > should I pick them up for the games team or just leave them out there as > orphaned? If you're not sure, then it means you better state in the bug reports why they should be removed or reassign the bugs to ftp.debian.org right away. Everyone likes to play games, though I think the Games Team should know best what games to definitely keep :-) Cheers Luk -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remove groovy
On Dec 10, 2007 7:14 AM, Moritz Muehlenhoff <[EMAIL PROTECTED]> wrote: > > It was reported to the Security Team, that groovy embeds a lot of packages, > > several of them security-sensitive: > > Since it's in contrib, it's not security-supported, but given the state of > > it (outdated, > > hardly any users) it should likely be just removed? > > Unless anyone objects within the next days, I'll file an RM bug. Perhaps people on the debian-java list should be given the chance to adopt or fix groovy or give an opinion on it's usefulness? CCing them. I'm also hoping icedtea will happen for lenny so maybe it will be able to move to main. -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remove groovy
Paul Wise wrote: > Perhaps people on the debian-java list should be given the chance to > adopt or fix groovy or give an opinion on it's usefulness? CCing them. Groovy is emerging as an important new language for the Java platform, and would be very useful to have in Debian. Of course the package must be updated. I think we have all the dependencies so it should be possible. > I'm also hoping icedtea will happen for lenny so maybe it will be able > to move to main. It may be possible to build with gcj. Maven could pose a bigger problem though, but hopefully that can be solved for lenny. Marcus -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
