I'm reporting this bug because the package in summary fails to build when forcing --as-needed on through spec files (check out http://blog.flameeyes.eu/2008/11/14/problems-and-mitigation-strategies-for-as-needed for details). Check the attached build log. Thanks, Diego
Created attachment 171863 [details] Build log
Given this was left unfixed and it's currently building two bzip2 versions that should be pretty vulnerable ( http://www.gentoo.org/security/en/glsa/glsa-200804-02.xml ), can we just drop this?
Please look at patches in bug 240121. This package is being used, please don't drop it. It may be possible to conclude there is no need for old bzip2 and just use the latest one if it generates files that are bit identical, but that's up to the maintainer to decide.
Sorry, if this is the wrong place to report the issue, but since Flameeyes has announced on his blog that he intends to remove packages like this one (with open bugs and CC to treecleaner)... This package is really important: It is the backend of app-portage/getdelta; this combo is badly needed for Gentoo users with a limited internet connection to reduce the bandwidth needed for package upgrades. What this package and app-portage/getdelta really needs is a new maintainer: Both packages have several bugs open since almost a year: Most bugs have patches attached which would just need to be merged into the tree (desired support for the upcoming .lzma or .xz formats would require more serious work, of course; this also would require that somebody maintains the code on the server side). However, Genstef apparently has no time to fix this: He is on devaway with "feel free to fix my packages" for about a year now. There was a thread "Packages up for grabs: genstef gems special edition" on gentoo-dev in March to find new maintainers, but apparently nobody grabbed these two (also, deltup was not mentioned in that thread, probably, because it had no open bugs at that time).
(In reply to comment #4) > > What this package and app-portage/getdelta really needs is a new maintainer: Martin, I already work with you for eix. Would you like to maintain set too with me proxy'ing your commits?
It seems to me, deltup has an active upstream http://www.deltup.org/news.php so I am perhaps not the right person to ask for that package. Concerning the getdelta script, I cannot estimate how much effort it needs, because I can only roughly guess what happens on the server side: apparently, that code is not public. In any case, although I am interested, I am hesitating to make any promises, because I will move in a few weeks to another country, and then I might perhaps have no time for gentoo anymore.
(In reply to comment #6) > It seems to me, deltup has an active upstream http://www.deltup.org/news.php > so I am perhaps not the right person to ask for that package. > Concerning the getdelta script, I cannot estimate how much effort it needs, > because I can only roughly guess what happens on the server side: apparently, > that code is not public. > In any case, although I am interested, I am hesitating to make any promises, > because I will move in a few weeks to another country, and then I might perhaps > have no time for gentoo anymore. > No one else seems to care =/ http://archives.gentoo.org/gentoo-dev/msg_6c654806549b7fe5218cb7932f0ccb78.xml
Fixed in portage.
