Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 589592 - Multiple 389-* packages: long-time p.mask for irrelevant secbug, defunct upstream
Summary: Multiple 389-* packages: long-time p.mask for irrelevant secbug, defunct upst...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Java team
URL:
Whiteboard: Pending removal: 2016-09-21
Keywords: PMASKED
Depends on:
Blocks: old-mask
  Show dependency tree
 
Reported: 2016-07-24 11:49 UTC by Michał Górny
Modified: 2016-10-08 11:33 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-07-24 11:49:51 UTC
# NP-Hardass <NP-Hardass@gentoo.org> (05 Feb 2016)
# Security issues. Under investigation by maintainer.
app-admin/389-ds-console
net-nds/389-admin
app-admin/389-admin-console
www-apps/389-dsgw


Secteam says they are not affected. Wes says upstream says they are defunct.

Half of them is maintained by java, half unmaintained. Can we lastrite them? If so, I'll do 14-day last rites as they are masked since Feb.
Comment 1 James Le Cuirot gentoo-dev 2016-07-24 12:34:51 UTC
(In reply to Michał Górny from comment #0)
> Secteam says they are not affected. Wes says upstream says they are defunct.
> 
> Half of them is maintained by java, half unmaintained. Can we lastrite them?

Go for it. How about these though?

app-admin/389-console
dev-libs/389-adminutil

They're not masked and may not be defunct upstream but the packages are outdated. If the maintainers aren't interested then please put them on the pile. Wes, William, please speak up.
Comment 2 Wes 2016-07-24 12:47:18 UTC
(In reply to James Le Cuirot from comment #1)
> (In reply to Michał Górny from comment #0)
> > Secteam says they are not affected. Wes says upstream says they are defunct.
> > 
> > Half of them is maintained by java, half unmaintained. Can we lastrite them?
> 
> Go for it. How about these though?
> 
> app-admin/389-console
> dev-libs/389-adminutil
> 
> They're not masked and may not be defunct upstream but the packages are
> outdated. If the maintainers aren't interested then please put them on the
> pile. Wes, William, please speak up.

app-admin/389-console is maintained by java@gentoo.org
Asking William about the others again just to confirm, I'll update when he responds
Comment 3 James Le Cuirot gentoo-dev 2016-07-24 12:54:54 UTC
(In reply to Wes from comment #2)up.
> 
> app-admin/389-console is maintained by java@gentoo.org

Sorry, what I meant was do you guys want to pick these up?
Comment 4 Wes 2016-07-24 13:05:47 UTC
Ah right, I'll check with upstream.  I believe William is offline for the night but will get back to you tomorrow.
Comment 5 William Brown 2016-07-24 23:43:01 UTC
Hi,

We are not interested in maintaining the ports:

> app-admin/389-console
> dev-libs/389-adminutil

Please consider them for removal with their current responsible port maintainers within the gentoo project.

Thanks,
Comment 6 Wes 2016-10-08 11:33:29 UTC
Thanks Pacho