[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-dev
Subject:    Re: [gentoo-dev] Last rites for media-gfx/xzgv
From:       Jonathan Smith <masterdebater () myrealbox ! com>
Date:       2004-12-29 19:44:03
Message-ID: 41D30903.9030304 () myrealbox ! com
[Download RAW message or body]

Thierry Carrez wrote:

>media-gfx/xzgv suffers from a vulnerability[1] which potentially can
>result in executing arbitrary code upon viewing a specific image in
>xzgv. It needs patches applied, patches that are referenced on the bug.
>
>This package is no-herd and original committers are now gone. We have
>two solutions here : it can be adopted by a developer that uses it, or
>(even better) by a real herd (graphics comes to mind). If noone wants
>it, we'll assume that noone uses it and that it can safely be masked and
>then removed from portage.
>
>Package will be security-masked in 48 hours if nobody steps up.
>
>[1] http://bugs.gentoo.org/show_bug.cgi?id=74069
>
>  
>
while i am not yet a gentoo developer, i do use this package and 
submitted an ebuild in bugzilla (just now). i would greatly like this 
package to stay in portage...

also, i have submitted a number of ebuilds (using bugzilla) for new 
pacakges, version bumps, and correcting erroneous info in the ebuild. i 
would appreciate any constructive criticism from anyone who happens to 
encounter these ebuilds. my bugzilla account is under the email address 
smith.jonathan@gmail.com

also, i would ask that anyone email me with suggestions (other than 
what's in the developer handbook, of course) on things i might need to 
learn to become a developer. i've been working on ebuilds recently, and 
have subscribed to the pertinent listservs, and am also editing 
documentation. anything else i could do?

-smithj

--
gentoo-dev@gentoo.org mailing list

[prev in list] [next in list] [prev in thread] [next in thread]